last executing test programs: 1m23.488357311s ago: executing program 4 (id=293): gettid() msgsnd(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_add_watch(r2, &(0x7f0000000080)='./control\x00', 0xa0000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1, 0x0, 0xfffffffc, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x8, 0x2, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x2, 0x7, &(0x7f0000003340)=[{&(0x7f0000000cc0)="5decc82340df230f30e92a488b90b78705bfda05b53db964a1d00b94626ae3e99f98d17293132d2113110dcc451abfcb1779031379a0e4c9e064898ad406500af82076c2345013d981e1ff76d9a0497c1634eaa3a3a852c7ba4cc227f0adc23a4eb58adb390e2fe41e69ff7e55dc208d3fe89da41cd77ec22c527a08c849a9cc0159822450a005a1f9ec09bd7e701e7a2757e90542481cf70151483b84fe54bb920c7e4a3f4f83a76d7cad5801fc77096daa8ece292ae3f05f5fa2", 0xbb, 0x8, 0x7fff}, {&(0x7f0000000d80)="9e03219b8671357173202e473428fa93c93f5a5d32edd6e2904000fad05af57364ad33c57b847b76e08f872293b7c2554770d8891bb615246c4a1aec771ffcdb3347f4ac71321b1bb830a9789d77bafe73aa0eaec79a528dcbb9a839979daac0dd47050467bafbb7ad1e525bdddd3a044b76de633c604ae6c97da6d003152fc20c4ac18f148a98c1048835ee394abf3b97b1c834268d1f1ca51363ba992e727db9af9ac379fb6ef65d7833a000ececbf3e0e8cb0ed27a26a678a7d2fa317044d06334112510350e98dda3436c6c68cdf2c3100fc22fe711ec1eae03c3fff22", 0xdf, 0xb07, 0x9}, {&(0x7f0000000e80)="b04f6009c2821342b6bf8a4bb8acad2e3afbb651145a476e8e7d171bd5c0814367a4343cfeb2ab78bbe4cea2095552a349f1f4abbb1bb71f58c6119fd9dbfd0c875142582af231eaac22c85f3b5c1a220d300328b92e5eecdb54436b882f6e78bff21b599e78e664b210", 0x6a, 0x400, 0x6}, {&(0x7f0000002040)="2f70127192cd8e3952c412eae45f5bccda523b15947ba8cfba00e2d09a5416fbfc84d387101d77244ad01219657dab4a727660e5446858fe6934ea83234180bb2c4cf9215a501d1e3afe7e111c1a7dac18944068f08c60c113fef98c83294b7b04a0a57ee12b62f8847c8ed8da3a921d4924c6acc12b471048a88b5605d2497938325bc264933203fa4ce55bfe8c1c77a3f7492cfd31108ae4d4b0ceb5e5e30f532a5364a622366eda80b4047e9bbe2648c810a167bcda617a2f7161b2ad1c2dd2cfa5ea10eb254c54f4922d79a910d6492cd61050ef5c826a88", 0xda, 0x8}, {&(0x7f0000002140)="8a1f4c7a82b0b4f07c7923698b48206a16cc0723575ef53cf525e91bd6253044d4fac219ea5ebf4170126ab1120053718c9ee82ec629c01eaadae0485133cb9cb70e5f920f4852a9246fcd1120f01ea1fc9497202604590e11efdd668d2f908fbc06d0b968a89591d2091b0eba18b2ca94e8bbc9fbdcc517208238a7cf425ebb4b6a3dfc1849706be766abc6eb692325b22f77274788d99a6a4e1cb60b294fe1b06492d083403d1f39f9d79855d86f261e2c6076780695f5c10518e69954c25f9d31fd76a413bf5a65d30ab1bd92dee1d5c64e732886e84691ecc2763255ebd59e82a1ee5a5ca361afcf1b9ff19190ca4c", 0xf1, 0xffff, 0x3ca}, {&(0x7f0000002240)="b5c733bae93e6cc669e4b25e1f85a89d384d86753802c84ac3e8b2e7a264f52b970f6fc78b9af4eea09da500a4c83999279d0b0bde0a7b5c2731c27724a02c4c8aaa707f0881eb10dbc48c6a1a9206f8d2316dc213700bd7835ca866635ba6d16a0d5612415ef886f7539077a3bc5728dc5c643950bb740eac398b212baa7f58cd3a80dce6c02473ed5d8ae3e4d7da631b253edee8e4c481e2622f9a727a419cd67a473960ed5645b5c19317f16db739afcec7ba06637e9ff52524917632bf433d675ff48a22af736d1eac2601444fc05f44fb703197e9a5e1d8aa573c740a43cd4aca01006123d8af36e63dde17161dafca497ab0", 0xf5, 0x7, 0x10000}, {&(0x7f0000002340)="7155e400fea32da149e0c8ed290280999ce4889e2450d5bc0e06c2c5a8df0c12ce3b7ab79d87710cb0c2890a20d08d113fe1293e47111c736d4aeab4b45fe67c929e3858b48b33715d9988758f89cff533a5294cd78c0c7a5ac75a0b1d26444cb41d7603ec85fbece7f187ce7172d88d64b4087d531d70132ab6a7e79051eaf546c3f9912c86785d4b8c759c371d41fb00a99c046bff5335aebdae818ee9c3ad3586309109334ef4821fb81476d533f6a04c926fff46231b4ec3a8802abe0969376f4f973587ba04df3c4441c7a7ff06623bbaa14332ab15eeef85bd90b9fd5b5c45e09c7e4f50a7c3147a612639bbf49252da9acb71f565410f8cc0c87bb07f4e89b7cf9b6e82c05d266ad9144f5dc59e77eadac204bb143b9da2288b5afff63eb0a3e204f75a877aa1e5a49a6f2d7f3b5424c0498a49e83e06ad5ea8a3717b6c9b848bee162cbb64ffdab400df8455059410bf0eb2ddc90d4e917a6b445102af1ce496124070bfd9794d03a95574cbc2ed1f3f4eb06dadd489557cf909814855f04efc6cf4bb1513ce7ee181b8eff60125ce74ee54b73bd5702ca2e9c2c8b17b092b881446c4e0a0c84fb57a601a306f48f63c698c8ff75ae57b5ee6e1e38a09e2aa8bf6f79ab393f27fffa8061a6ea2872bc4a5e2c146260be6c39a94e27fe349fcdf14318f36f8d3c65f20abdf3b3a452aa41d61b18041358ebbfefcb4022ef34031e08032897d327d44fa784a773a54ed356f9193a652d459291d51b7bdba289a9a4e2f22683a3de2f2e8eb9ffb676f488c88e5cf05deb615efe867b9f7803bb54798f9c02f261d1ec47c586ebbf51cfcf936171e7bb618f4fdb15005f6abea950e623c5426a9d53cbb7cebdeeee638bb08e6e8fd7fc69c3ef5e2b66842063ca5bdc6c0bd1e705d93754d871bc0297e2f950d8867295ffd823340673482953a7e820021c515d45de5bc2bb8b7fb57a555021421c11ea7fad46cdbbfadcf4ee64ce3c2657976e8e1b3edd1bf6f483e115ffda8660ac4693ad9105193fc61329b18574a1e400cd29ba71de1db90e228804d68de68663ef3a7545448e35814c26bd634d76b55339ffa4a059132f3554fc0623f77039c814c25b2a70204e181e78aeb23bd2a9573e3961520d01c581af975cadecdfa451057bffa72ace547fc41470bc7dcd98c921a59183b29a45c4c4a5bd680b98e5f023fb2dde73f2cd7bc44adec9768b9d87ba120f2094d0f16a46d95c557121e5190c44cfdc7157ce21d9e8a1bbf00416f7720ab41d9641035a3962afcef480fa8fb241ebc3c19bf02875cad091eac3a43cb283ab28312c5bd3917a6fa8d35deebd36366d750017dbb67183b3c684385e19a97f4fe7ec2508a6fbd6e259a9430134d003e5eadf65307c4388d0eccf1647c1e92e81c5ac8418afd86001007ab0159157cfe3d91dfaa8c0cec530862aea2480607435cceb56314c85db8a840c16762b0191b5930e674bcfd37f94c583712b72f73cc255bad1d728408124e91057e70bb7ec95aafb5b29b3c63f654df0f5c303ee31d1f1a1d8b2181416cec28288d59cec8a9151638dda68a3f8a8cb601ec17dc34bcf7d85f89a3111032e25c29fb602a50fb49105b05ccd0cd0830138735868bcda63fe5b3b477498ce617a3a4cf474e2e369a2a401e08b6de4c7195e8093fce1942e23894877af8a458a74035cab5f9e41d3864d418bb6824acb45dca890495a8a021543bdf6ba19fd34422504105a737d6eae1342a9291ac622cec5a514e83aa94b3ac341113304368231c54598ddc1c151b5dc2fdc320380582102971172e7361bb694a97a5e3b142561d8470c1f001dcb0388e633263afa99c6aa53ade4b92cd082aef55bcfb0e97f6f4be42d6216a4ddc76efa97ea51f206998b0468b425726e73c8b4695c4bcb05e3347759b23e5387267fe769fe3ec18a0c4947ec1f9c913aea6492c33f64ba1ca04ba9d6d6301e763fadc400a8b9bfc55a086be6f43c1661c1a2cb41fc54597e6fd0dcc46dd4bc818ebcbfab0b99098aef37c316161a84771c3ce9c6a5211b5cc2b23470b7e81f72922656c43bfa591f00ffa0e46571ad6268573eabd29fee904c77b1b1ac9e2a66736d01dfd092cba924464c0b8255278af4ff16acd29bca85174fb034d72a167d1cd6b379870de4d87cf569825b516ce992e227f37dac63292b7ee14447b944bb2bce605febe1fedaa9aa2650b58e5005b728818d2efd1d444309ab888de89f17aff7df71af5881d63e8593a60690986a8a5b77aa705a53028149a0a5b084194b8c7e617528218c4130cd6907ca267420728ca133ffc9c9458612bf62fdb142243951b05296aef97fa011672cce130274311184fc5139dea8d5a1ff67aee0c1b15d2cdc8f083bb9a76f55a3e0b29fb6ae33676ed7bf2257dc1d681d5002a0abd5eaaa17526aadc9e6ccd173a23403b79cf89ab097d53f188ed190b5a38975363e6818b3fba8a312efc8cfd01a6e86f218c1beb48668af0435e3714ab0ee75beca2ef6efa20ac752e3e3a7e3ad266b5839f6654e52f3cc8858dbc9a0c9209d24e336d47dee75b877b8f5c41f3aaed1bb69fed9c51a69e916410fbdba70d422ecfe2909c1ba97e52fdc09f81e83b33723d9daf1091275d5eab39b841e6177d7e25e36aa37b9bdf0a28405185b238cf6afcfd025e8cfb04c46fe1977d97817e7f177a958bfd76eea639fefe9c0942c1a81d4d33ebd8003802e68cb944ed93362e0c9d32bb96f4e43306823da0aa39d115f458a018628cac3419cdbe6bf561f0626ed2e1ad15d1680ac541555443cec93db964a7d7d46b714ba7a3276b849e25279f74abcab6941950462874d87a9dfafd6f7e1335ab050021172c0a5943dff2b0870c58159c02f7229e37da68750db62ecdb0708cd94c32614259628189b9535ddfa505d297a4d4cdb99588cbe164ace0f9d4a6570407e6448c430a775cbc8c9383ed700b995bd25924a875bb94cd5fbbde1fd4fa6a446527a472bca3ce5bdd9a430a09e6a90106aae57b8f50669c2d4c175406e9da5661119ce02f66ca2dcd1a1cb9e4075d4a1af16f0984fd88f0667fda8902ad5eed47c3eb6999b624e8cbb3231cca2a05ce885666cee5f4a5569dbcd7b255ad629c9a145c1b1d48fcb37a66cdbb3eb86be5a5704726a44ee798c83269979df5ed126efc63276c4c831ee3eb814f80ac013f5a0946a9b9993765ce4c6ab18cfa8fc93103dea0486b5369aa1612424bdc252ec09b970c8748646cdb5d94be8345918e2774e475b8b068a018748c7851e5b38329d0ce0f709da5caf5cd2d68510e50eb965dbbd2a0e20478b70fc77b60e6128e39144018400c1e442cae1f9ed8b971244c16b75bbc20ca7b284c5dcd8dce1b16b99365def1f7753510613aaa5eef16e6ca8c38a2159ce2706f7c7f849be4d135dddca1f8222310b74883ba095635aefcdc7e026be52b0acb1e36616a261d57dd4045848aeb81f2585a0851d32d5c52632c348f1e10cb0b22d4c3a04155d14841a6c355ada1cf80cb1d7764cf1acab36faa1451dfa33bd06618e0adfe239b6bdcb8a7fb61c3768e45c70039b43a58ad39414095ffeda72c6e94dbea9d6c23ef74fd38861c41f3a4247e9e6eb35bae69d263da6855777da954cf4a2f756b9917f999edb53acafc7f32ddd1d8334f255125cfd073f57bf43bcbf19541d83308a36a3bdc852fab1b80fe75278edbb00beb12b050414a7283eb10f5b4bb78b475bc6947eb4d92c4322d81aaf6fdce5a671a4d78fbedc85f7ab1c993f0063f7cf693eab48321c06df6008f50685125dba0ecb7796a1fac707ee09d4acb702b14ef9181550127772779f96a86fc5535659062bd04e4b8412dbaddd0f29e125abad75d580e12af1f6f7768386eec17a62b3027a95343a385136bfc4ee6393148d77715ce61191ed5dc2c2b36e5f269b0ab8188b39fa4119418e85e5af9eb1d03df4026358fa80f7af392fdca2b6b8e404acebf89895953a4643ea61f8b4c5aad6cc6930e42ab010ca45f15728738e1cc6b59ab85f6fc1422864e1b621e5e2058e05065ab2e15792d8eb35a0a185c46cdd3c2d1d46e197dce9afe842a158869d9b7d63aacae485dc893d6f0c66d89723ebe4503e3de2b6006422dd346f5376e4eb40deb431e460b5d650445a696c059584ecce12a476f56c1a3716eb89f18e3b10bee2f25ccba835fb88ec20c4c6a6a49e58614dd970d5de497f1f522b6e4cae30380a61b516ac2a938a3efee312d487149d0bd28e447b4c4bb52e7d7b5ed70b38afc650586f53cc5a8242245d1a143877e8574f24d63850301e6f84a6c465d90ce035ec8f9242efc160b40b9624abe4b6031a3536a1fc72046feb4d28dcbade4119310654cde07f473e40ac397f01c747820363d22948aa54874c52e5234360467d635642df15ed8981594e26357135bb18d8aa6ecc31567d4bb21efe602f9b2f1c336cf0df436bec13e2303c9833cc58720a99d86169ed4463d2bbf109cffded7d53f9cd194652b02c15fb017cd6bbe740532ba14913b8651a0cf363bd7998c60f1361d06cd9f01dc2370e3df2df394bcf701e0750e05f5e3a49fb7c007e21ebea1f05bc9e59f2117c5729f18b4b2254b1ecd1f173e322124e96c83de386dc567ddbb71ab050822babce1383f06134c5477b4de6fa6a1ac4488c26d1142cd57771007caf375daac7dfa507e47c27cc22130c163adb1655cb7f3db335775a57822be8ab266193e3697ae3723bea472d914393d64a9f0631a607033f1fcc839f3ec8eee9857416a66d174abab20bce5e286f089d5083e8677c0f66f8dce815bf29bd8c31a4efb3d08f9d2854d5b74434481b04cbf2861989afd675eae502430a88c1b2eeb48872342345bafb3f7f2696a37835b3599e5b6ec791d247e0f38264b0ed9b061d08dbfc939acabe79381a56d4e31c6a537839c39ff614e856b4906aa6bf7a3af28d2d798cbd36a0c403346a064c285ce8629ebe24fea0b67d6870267323662eb65229b9726698f02433790bc92490703e101c7ab942974805023b81e3a839c8099f2065a3a07950ed77b8cb2de8bed9fd7505a729d721d076312a57f42c74c12ce6f5b9dffa7e10c60a0e7ee49e0e66ff91bdefa897f85ec102f58fdd5793ec35ae5b60c3f82b505923f4fb87960803cfbdc446c4dc9be17f27d4db3e5e5b982f9373b9c8200afd1d78cccbb233f2b2d39151b8406aea41219095855d79116999e2f560c7e072af59e6c98a9c8c2595180d22c6cb7fa8a02e82df7d0406ce88827f8bd4e010d0087d52294d7d999809c24e5f594845b9c91ea8d3496308500d4996d425d7822651808a70e8eca149429c6c6a71dd5f7927ba93f121e76a35f5662ec55eda3ae9b23354145776c65f1767da0a9ed38f6a0cbdadcc4f0aec9660ed18002a4ce040d54ad44b775153c63118e9ee8e9fed9bf5615ba9a4a54cee6b684777271380f1235bb1537f19e10e66351019180876c2ac044ce664ecc04519174013d99b76ab8c5f3237cac748a58ad6afb91fa9501efc6475f97c6c8802a73b1d688c1679d4806da6e406ee3a74866345f94f3905e3307477c05ef79aef19146784cb3323ed163b78be26c8e14f6bf8a024ab67cb2f827bdd8608537b75bb092eb39fee062a5aabfcd107dc1ca41f0c7ad6f7d45709ace0930152faf9cb3cf9862eeee660aa9f7052ed1b5477d452935320740c4d6d0b53c39509aaaf900dcb1e909db7985aa8a6e13aa49a1d1d9f83b18d9ce0bc72cab5c5b8d54501dc6c204", 0x1000, 0x6, 0x1}], 0x3e0000) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1000) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m19.409752831s ago: executing program 4 (id=311): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x4e23, 0x0, 'lblc\x00', 0x11, 0x1, 0x7f}, 0x2c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 1m16.190058523s ago: executing program 4 (id=322): socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x20000400) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x80, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x6, 0x401, 0x9, 0x8000, 0x32de, 0xc255}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000001, 0x7, 0x4, 0xd2, 0x2, 0x8}}]}}}]}, 0x80}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000001, 0x8}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6tnl0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r8, r9, 0x8, 0x4) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000001c000100293d7000fbdbdf2507000000", @ANYRES32=r13, @ANYBLOB="8000780a0a000200aaaaaaaaaa1c000051222e39411cd1cacab8575be2f0718f3b5a21b79bcf51331918055d7e438661ba1e428cd5d510f4eeb6d5d3a66faa75e7ed15ea2ae9eee6f7579f9c45a313eab63163b0d39b8de639659ff6b62d0dae4162a6ee0d84ef5940b9074e2e6b0f60e6df828cc06eb097f7466eb515a63fd8a469980d2d3bfc91851c4a5f99fe0c5c19c17a266caf5a15621a7587af3416bd9ef061f1d6a9d4d9053a28476ed14e8e2ea90e7380b04f8c19d3ecb29b7931f65725d94b6f08cc295ab77f86ec3629deb2ad784dff140777ac3baea980a0a8be6a0b"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x4040000) 1m15.173751903s ago: executing program 4 (id=332): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006900010029bd7000fedbdf250000400000000000080001"], 0x20}}, 0x48010) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000f80)=""/29) write$binfmt_script(r0, &(0x7f0000000200), 0xfea7) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee12f200daf7a4936ce7110ff4117639c2eb4b78c660e677df701905b9aa0339a2884b3e5728a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 1m13.566251659s ago: executing program 4 (id=338): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x4e23, 0x0, 'lblc\x00', 0x11, 0x1, 0x7f}, 0x2c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 1m13.213711947s ago: executing program 4 (id=341): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a6400000006"], 0x8c}}, 0x40) syz_socket_connect_nvme_tcp() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185000ecffffff00000000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x94) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001680), 0x1, 0x0) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800) write$cgroup_int(r1, &(0x7f0000003e80), 0x12) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1m13.126312142s ago: executing program 32 (id=341): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a6400000006"], 0x8c}}, 0x40) syz_socket_connect_nvme_tcp() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185000ecffffff00000000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x94) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001680), 0x1, 0x0) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800) write$cgroup_int(r1, &(0x7f0000003e80), 0x12) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1m6.635275445s ago: executing program 2 (id=381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0xffffffff, 0x1008000}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000600000102"}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f00000000c0)={0x81, 0x94}, 0x1) 1m6.489246349s ago: executing program 2 (id=383): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x3) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)={@private=0xa010101, @broadcast, 0x1, 0x9, [@rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @remote, @empty, @local, @multicast1, @rand_addr=0x64010100, @multicast1]}, 0x34) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='*\'P.\x00', 0x0, r2) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000180)={0x5, 0xc, 0x5}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40001) r3 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x596, 0x204000) ioctl$TCXONC(r3, 0x540a, 0x5b47ab6711a9e274) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0xd, "3eed2f39a93a6a32ab2d3d4d06"}, &(0x7f0000000340)=0x15) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={r4, @in={{0x2, 0x4e20, @local}}, 0x9, 0xfffe, 0xfb6, 0x1, 0x2, 0xb, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000480)=0x4) recvfrom(r2, &(0x7f00000004c0)=""/114, 0x72, 0x40000020, &(0x7f0000000540)=@isdn={0x22, 0xff, 0x40, 0x9, 0x47}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) close_range(r2, r5, 0x9a07861ee27281c9) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000600)={@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x29}}, 0xc) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x6cc9bcb454ee0774}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x7}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x800}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004041) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000780)={0x100, 0x4}) sendmsg(r1, &(0x7f0000000b00)={&(0x7f00000007c0)=@caif=@rfm={0x25, 0x1, "8e8d5c0557da1da27aed57e58982cbda"}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000840)="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", 0xfe}, {&(0x7f0000000940)='\bZ', 0x2}, {&(0x7f0000000980)="d15bb91f91ca4a1b2b70b8e7fa469e9df19be22bcf49b2d182b902a549537252b7cda96416405c0f475ef3c31fb068e281030a4a52c2f8139503a4a76f6bcd0d", 0x40}, {&(0x7f00000009c0)="7ccad3d2d7727b5a6ebe0337fa9d3622eab5845f49e6fa237f8ba4627435c2a0f5f393b007825006ce26192c126833c686376c9e99b716e0cd04cd7e783272e442f3f7afc924d4a154cb63213898d58cdb7f7b42371de45feefddcdecb014bfad5cfd98e09f9536cef679c6c69a59e5affb31e18c60dd17fa13786ade66145786177d03746a447a99ac3a26e290382b748a5c3b04ac7ba4741f4f42460a077aac0d1", 0xa2}], 0x4, &(0x7f0000000ac0)=[{0x28, 0x119, 0x0, "e2633962cd22820594492630024624daddcc1b7c69d2fd"}], 0x28}, 0x8000) close(r2) write$P9_RCREATE(r3, &(0x7f0000000b40)={0x18, 0x73, 0x1, {{0x2, 0x4}, 0x6}}, 0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000b80)={r4, @in={{0x2, 0x4e24, @broadcast}}, 0x331, 0x5, 0xfc, 0x9, 0x10, 0x9, 0x7f}, 0x9c) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000c40)) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x9, 0x11, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@call={0x85, 0x0, 0x0, 0x9e}, @generic={0x6, 0x1, 0x5, 0x8000, 0xffffff7f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000dc0)='GPL\x00', 0x0, 0xe0, &(0x7f0000000e00)=""/224, 0x40f00, 0x63, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x4, 0x7fff, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000013c0)=[r3, r5, 0x1, 0xffffffffffffffff, r5], &(0x7f0000001400)=[{0x5, 0x5, 0xa}, {0x0, 0x1, 0x4, 0xc}, {0x3, 0x3, 0xa, 0x7}, {0x3, 0x4, 0x10}, {0x2, 0x2, 0x3, 0x4}], 0x10, 0xfffffffe}, 0x94) 1m5.576163299s ago: executing program 2 (id=397): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x800) socket$netlink(0x10, 0x3, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1c, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x1, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) unshare(0xa000200) r8 = semget$private(0x0, 0x403f, 0x0) semtimedop(r8, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4a42, 0x13) 1m4.504497409s ago: executing program 2 (id=408): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x4, 0x10000) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000180)={r1, &(0x7f0000000040)='GPL\x00', 0x8000, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x9]}, {0x7, 0x9, 0x7, 0xffff}}, 0x9, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1a8}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x400000}, 0x0, 0xfffff7ffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x4) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(r5, &(0x7f0000000380)='./bus\x00', 0x60) r6 = socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x11, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730121000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0xffffffff}}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3008011, &(0x7f0000000000), 0x0, 0x51a, &(0x7f0000001200)="$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") r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$getregset(0x4204, r10, 0x204, &(0x7f0000000040)={0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x8, [@enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x1000000, 0x3}]}]}, {0x0, [0x5f, 0x0, 0x5f, 0x2e, 0x30, 0x61]}}, 0x0, 0x34, 0x0, 0x1, 0x1}, 0x28) 1m3.561149023s ago: executing program 2 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000f2ff110800014000000000140003"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0xa4000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) setsockopt$packet_int(r3, 0x107, 0x19, &(0x7f0000000180)=0xdf1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) readahead(0xffffffffffffffff, 0x3, 0xfffffffffffffff7) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='cpu>>0&&\t') sendmmsg$inet(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a", 0xd1}], 0x1}}], 0x1, 0x2090) sendto$inet(r4, &(0x7f0000000580)="17", 0xffffffffffffff68, 0x10008095, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a", 0x21}, {&(0x7f00000001c0)="621eedf270983653e7dae4", 0xb}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000000580, 0x0, 0x0, 0x2000000005b0, 0x2000000005e0], 0x0, &(0x7f0000000240), &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000e462e464c2484f0000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000200000000000000000000000ffffffff00000000000000000000000000000000000000000000f17820abfb1d4e9e0000000000000000000000000000fcffffff01000000090000000c0000000a00766574683000000000000000000000006970366772653000000000000000000067656e6576653000000000000000000062726964676530000000000000000000aaaaaaaaaabbff000000ff00bbbbbbbbbbbbff00ffffff000e0100000e0100005e0100003830325f330000000000000000000000000000000000000000000000000000000800000000000000bc00000703060000726174656573740000000000000000000000000000000000000000000000000048000000000000006970766c616e3100000000000000000073797a6b616c6c657231000000000000040002000900000005000000ff0300000200000000000000090000000000000005000000e4ffffff49444c4554494d4552000000000000000000000000000000000000000000000028000000000000000e00000073797a30000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fe"]}, 0x296) 1m3.303873227s ago: executing program 2 (id=423): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0xa6ff, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 1m3.284927604s ago: executing program 33 (id=423): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0xa6ff, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 37.456697573s ago: executing program 3 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000f2ff110800014000000000140003"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0xa4000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) setsockopt$packet_int(r3, 0x107, 0x19, &(0x7f0000000180)=0xdf1, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) readahead(0xffffffffffffffff, 0x3, 0xfffffffffffffff7) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='cpu>>0&&\t') sendmmsg$inet(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a", 0xd1}], 0x1}}], 0x1, 0x2090) sendto$inet(r4, &(0x7f0000000580)="17", 0xffffffffffffff68, 0x10008095, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a", 0x21}, {&(0x7f00000001c0)="621eedf270983653e7dae4", 0xb}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x296) 36.288963277s ago: executing program 3 (id=665): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) read(r1, &(0x7f0000000240)=""/28, 0xffd2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a80000803500008100000088a8", 0x20, 0x200400c4, &(0x7f00000001c0)={0x11, 0x5, r4, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r6, 0x8979) sendfile(r5, r6, 0x0, 0xfdef) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000000c0)) 36.131350389s ago: executing program 3 (id=666): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001740)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001280)=""/4087, 0xff7}], 0x1}, 0x40000120) r2 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140)="c99c22cfee9470f706db8caf760e7ce70b3b570485faf61226a2ebda28480af9cf3d941a498056321974010a9da8d1f093643ee36deaebf54e770f2e35eb2a55e17e27d44193fd53cf4e9fd29a7f83fa500135dbf3a0d445d41799d521acd9c91b2621da87b2d3a1266c47eeeae2ce2b3dd9ded0ee5e937c93f9e6e354436727a1d0c47aa60666ac3c6c54456cabb4d9228402a2f6943018a6f80a489f6b38a6f22ebfded7df2113849669ce9de518a3f586c8d218361e29d78079027ac688f0d62340ef2fe9321dd27c2ebc5db6716850034d324d55dc8d0a8562d1938c38012431a7b6fe7f87a1d2359ac4b7", 0xed, r2}, 0x68) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x20f}, {&(0x7f0000000b00)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa9cb227694f5b326544c9c1d4563f937db955e0373639d6292234c292c5615d82c851b91585b7ad8748faf0d8e5d65994adbb137c7851edbb4a3485ffd64e1caf3117861898d4ba6e04c15a94496cc8c23793136c93ba88db52f098b37fcf3f6c16df2f500f5b2005def16d46d96544649249c26098820ed60c94032f6fc134664ae10a613d15d140a948b4b45471dea34c0f527fca192dfa77f262ec22b914476238014687f231fe251b57f7689e4850e2c1eaf49ad1773a1f971ba9d8a900e5e2121370ebf1a0c8af1eca3921046277767b7740008731fdcffcddbc2cb867ea2959a735c164e4c650454d43dd6034dd22e31d94df846ab6d1b1e7c2463e349ffda978a5e783bdda9e6fafb2ca73fb02ccc54ab9309988741fdfbef9000b605a2d3890468834f7d7f705f8da1905283343b78f30bc48c2c3c351e955823ca8e6e82f695252f0aecc64025cf1e26d4be77f4b4f96d9b45226436aa43cc78afe578fe8c44047eb9f66bfbc3f3daeaadda3c088299586d35c7a868a8122428161cff48106cd5529695a27ba78f1d124cab474705be18a40ad26131f48d25f1e1c7a19e23433ff6d6284cf70278d53d12b41a171ec23143601a31732cf143f386a4fdc49bd8f1c10af3a4a3f2d8afdd131cdee0e6aebfdc1fef1831abaa01741cf774eeed7a043d6368c2fd43371633089fa9fa50c7e41185d32cdbc49c0bec369fdd7ab788bbe8cc87676f8597dc626556bbaef0bcd5e1a43bcc4e2c59f310e1c2bf2fea0f360b33408fb2e1a1024e3d88dff19496f384b0b4ea97c0281904010a7eb34a3d6bec959f6d59a0016d28da834b382e6e2c606236dcd17925b95f667e899a6b59ef20c1a96f0053ffb7c5a07b8ac6f20fa791d15c19b814f049e0b2da6f5799daf4d345aa475766367f99c160e8a08fd7f1e42e5b38eacba4f40eed3fccbfb89f4b644afb1e76eb4913e27e1540e2d4ec8ed8748b4756824a65c933d4120d1c2fc7f343ce0958478a97aa352fc2ddaf917fb2ae7bcce4d6f9d4b32387baff970a701ce01a73937cf0f12f6e41b86a06ea1b971d1ad7f92c0562a7778ec6c060000717217834e25b4b25f06134bbfc29f125c36c7e80e92a13127c70b37da8f1be6a3948593a6693fa07a91b00405d8ea47c88ccd02e7a64e0bd31d115c93f7c0dfe1c51d338b08c9825a29802ba8bc5c4655072da6dd2c27ce6684e1c2dd7dc95dcf90f934ade45fe577e4d62dca06530ec1b71348913891b9a2c6191cfec8ace643938c0f93db138e6dda35cb770027dac9179fc9c8d2747f3e6fda9803170fb1ea67612d113ccc509e249d847f42de503ae3292cdb80eb7a7cdc42403dd28abbdcd229cef459401b2ba357d3cf1fa4ebb080da2bce291b192f793963b16aebf6d71a8f93a14c96be46d38dac71789ffae8774d2fdd0ae829fae308a7872addeec7788f7853371770f9c7ee3fad00054f44714addaeb5ae7e4ca674e07e12cc3942de4e24fead27a7c88c6573f40e283e372bb494636875e26c15df6efe54f512b0a7394e248cdf7347de1d173ffad0d45a984be16124adc44b1d4d1955644a", 0x47d}], 0x2, &(0x7f00000002c0)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @noop, @noop, @timestamp_prespec={0x44, 0x34, 0x46, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x10000}, {@empty, 0x101}, {@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8001}, {@rand_addr=0x64010101, 0x3}, {@rand_addr=0x64010101, 0x3ff}]}]}}}], 0x50}, 0x0) 35.138403354s ago: executing program 3 (id=677): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x4, @perf_bp={0x0}, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4008800}, 0x20040002) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r7, &(0x7f0000000000)=""/34, 0x22) getdents(r7, 0xffffffffffffffff, 0x5a) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r5, 0x24020000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 34.903568522s ago: executing program 3 (id=681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x104, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @remote, 0x8, 0x4000000}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0xffffffff, 0xff, 0xa, 0x2, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x2, 0x5, 0x7, 'ip6tnl0\x00', 'pimreg\x00', {0xff}, {}, 0x0, 0x184}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x101, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @rand_addr=0x64010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 34.683235444s ago: executing program 3 (id=686): syz_emit_ethernet(0x79, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x43, 0x8, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, {[@dstopts={0x5e, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x1000}, @enc_lim={0x4, 0x1, 0x3}]}, @routing={0x87, 0x2, 0x1, 0x6, 0x0, [@remote]}], "e030ca2b026a38decc6984156181a588ca1a33"}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x10000000, 0x0, 0x400}}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008050}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x6c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}}, 0x800) 34.60342881s ago: executing program 34 (id=686): syz_emit_ethernet(0x79, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x43, 0x8, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, {[@dstopts={0x5e, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x1000}, @enc_lim={0x4, 0x1, 0x3}]}, @routing={0x87, 0x2, 0x1, 0x6, 0x0, [@remote]}], "e030ca2b026a38decc6984156181a588ca1a33"}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x10000000, 0x0, 0x400}}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008050}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x6c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}}, 0x800) 4.069993599s ago: executing program 6 (id=1097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.769599805s ago: executing program 6 (id=1105): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000240)={0x0, 0x8, 0x8}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0xd3c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0xd28, 0x1, [@m_police={0xd24, 0x1, 0x0, 0x0, {{0xb}, {0xcf8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbe6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf8}, @TCA_POLICE_RATE={0x404, 0x2, [0x26ac, 0x3, 0x9, 0xfffff000, 0x4a4, 0x3fed396c, 0x7cc, 0x9bc, 0xc77, 0xbe37, 0xfffffffb, 0x1000, 0x5, 0x2, 0x6, 0x5, 0x8, 0x7, 0x39a, 0x4103, 0x57, 0x8, 0xfffffff7, 0x1, 0x5, 0x81, 0x4, 0x5, 0xfffffffa, 0x101, 0xfffffffa, 0x7, 0xf, 0x800000, 0x5, 0x7, 0xa, 0x7, 0x0, 0x7, 0x7, 0x8, 0x3, 0x1000, 0x1, 0xd1db, 0xdf, 0x80000000, 0x556fa8b8, 0x0, 0x4, 0x3, 0x4, 0x1, 0x88, 0x200, 0x45b2, 0x4, 0x62, 0x2, 0x1, 0xe2, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x1, 0x37, 0x7fff, 0x1, 0x9, 0x9, 0x5, 0x10001, 0x7, 0x1, 0x9, 0x1, 0x40, 0x1, 0xf94, 0x100, 0x6, 0x6, 0x44, 0x136, 0xe63, 0x1, 0x1, 0x9, 0xe7f0, 0xef3, 0x8, 0x400, 0x9, 0x3, 0x19, 0x8, 0x9, 0x3, 0x1, 0x6, 0x7, 0x9, 0x3ff, 0xfffffc01, 0x200, 0x9, 0x7fffffff, 0xf, 0x1, 0x6, 0x0, 0x85c, 0x3, 0xa, 0x86, 0x1000, 0x7, 0x800, 0x8000, 0x2ffaf120, 0x38b7, 0xe6, 0x100, 0x3, 0x8f, 0xfffffff8, 0x2, 0x5, 0x5, 0x1ff, 0x8001, 0x4f7, 0x96, 0xffff75d1, 0x2, 0x6, 0xb, 0x8, 0x9, 0x8f, 0x9, 0xdf9, 0x1, 0xfffffffd, 0x835d, 0x40, 0x1, 0x8, 0x0, 0xffffffff, 0xc, 0x28, 0x7, 0x142, 0x6, 0x5, 0x7f, 0xa34, 0x5, 0x9, 0xffff, 0x6, 0x9, 0x487e, 0x9, 0x10, 0xd, 0x2bd3, 0xf9f2, 0xfff, 0xfffffff7, 0x2, 0xae, 0x9, 0x4, 0x2, 0x8000, 0xfffffff9, 0x5, 0x6, 0xff, 0x5, 0x8, 0xfffffff8, 0x150, 0x3c3, 0x1, 0x3, 0xdcff, 0x4, 0x8, 0xff, 0x1ff, 0x7, 0x8, 0xac6, 0x1, 0x10000, 0x3ff, 0x8000, 0x7, 0x906, 0x5, 0x6, 0x4f9, 0x0, 0x1, 0x4, 0x8001, 0x8001, 0x7, 0xb4000000, 0xfffffffe, 0x0, 0x80, 0x1990, 0x4, 0x2, 0x1, 0x0, 0x6d0, 0xd2, 0xa56a, 0x0, 0xc, 0x5, 0x4, 0x93, 0x6e2, 0xffffffff, 0x10, 0xfff, 0x0, 0x4, 0x8, 0x0, 0x10, 0xffffffff, 0x10, 0xf, 0x8, 0x7, 0x5, 0x6, 0x8, 0xab9, 0x6316, 0x7fff, 0x0, 0xdc4, 0x10001, 0xcfd, 0x5, 0x7]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x3, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xd3c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000280), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "a0f3a80294cf58e1", "9d55fd4f13b813f2b6f897f600741d51", "2aa8d90a", "d16b00"}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0xfffffffe, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x10000000, 0xaa, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}}, 0x0) 3.698418763s ago: executing program 6 (id=1108): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) read(r1, &(0x7f0000000240)=""/28, 0xffd2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="09000000e70014000000d97bfbf788a8", 0x10, 0x200400c4, &(0x7f00000001c0)={0x11, 0x5, r4, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r6, 0x8979) sendfile(r5, r6, 0x0, 0xfdef) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000000c0)) 3.56977562s ago: executing program 6 (id=1110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x800) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000300)={'\x00', {0x2, 0x0, @empty}}) 3.45459026s ago: executing program 6 (id=1112): syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045000030000000000001907864010102ac1414aafc0000000000110002ac1414aaac1414aa"], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = syz_usb_connect$midi(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290d2d506ed72e8916003b4b686dbd7000fbdbdf252100000009"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x4000004) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) pipe2$9p(0x0, 0x4080) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b"}, 0xe) r10 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x44040, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, r5, 0x1, 0xffffffffffffffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="82ab", 0x2}], 0x1}}], 0x1, 0x4404c880) 2.816009787s ago: executing program 5 (id=1128): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) 2.796334174s ago: executing program 5 (id=1129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000600000102"}) 1.86834409s ago: executing program 7 (id=1142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) unshare(0x22020600) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000dc00128009000100766c616e00000000cc00028006000100000000001c0003800a0001"], 0x10c}, 0x1, 0xba01}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) membarrier(0x40, 0x0) membarrier(0x20, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) r2 = getpid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8910, &(0x7f0000000140)={'tunl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x2, 0x9, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_pidfd_open(r2, 0x0) process_madvise(r4, 0x0, 0x0, 0x14, 0x0) 949.881018ms ago: executing program 1 (id=1147): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500), 0x0, 0xc040) 949.490797ms ago: executing program 1 (id=1148): getpgrp(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) fcntl$dupfd(r2, 0x406, r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f0000000400), 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000200), 0x8, 0x7d, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x10404, 0x2, 0x82, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@delqdisc={0x58, 0x25, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x8, 0x7}, {0x0, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0xce, 0x4}}, @TCA_RATE={0x6, 0x5, {0x9f, 0x2}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x58}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400d856}, 0x4000850) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 884.142826ms ago: executing program 1 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000800) 833.566477ms ago: executing program 7 (id=1152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000020605000000000000000000000000040c00078004001500060000000500010007000000050005000a0000000503d3000000000900020073797a310000000012000300686173683a6e65742c706f727400000000"], 0x58}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000b6ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000020009500000000000000460a0200f0ffffff180000000200000000000000010000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x5) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x4, 0x30, 0xfffffffffffffffb, 0x83}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r2, 0x3ff, 0xb6c}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket(0x28, 0x5, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x20000881) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES8, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008b4b070001004000000000000000000000000000000002000000000000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000001000000005f28090000600500009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setreuid(0xffffffffffffffff, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r7, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10) write$binfmt_elf32(r3, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x8, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x1, 0x5, 0x8, 0x200}, [{0x6474e551, 0x8, 0x7, 0x3, 0x2, 0xc, 0x8, 0x7fffffff}]}, 0x58) socket$rxrpc(0x21, 0x2, 0x0) close(r3) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 814.981584ms ago: executing program 1 (id=1153): creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x20008200, 0x0, 0x4e, 0x0, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) 713.495796ms ago: executing program 0 (id=1155): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000004400)=@raw={'raw\x00', 0x8, 0x3, 0x1350, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x1280, 0xffffffff, 0xffffffff, 0x1280, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'syz_tun\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0xd0, 0x118, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x202c, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc43f}}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {0x80}, {}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1100, 0x1168, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x1, 0x0, './cgroup.net/syz1\x00', 0x1, {0x3ff}}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x200, 0xbc34, 0x7, 'snmp_trap\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13b0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011500000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 685.291481ms ago: executing program 0 (id=1156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x40, 0x5, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}}, 0x800) 674.909079ms ago: executing program 5 (id=1157): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0xb, 0x800000, 0x8, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 643.507534ms ago: executing program 0 (id=1158): getgroups(0x0, 0x0) 581.296183ms ago: executing program 7 (id=1159): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) socket$kcm(0xa, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) io_uring_setup(0x4b63, &(0x7f0000000200)={0x0, 0xbfffedf7, 0x10000, 0x2, 0x2d4, 0x0, r0}) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES8=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 580.836262ms ago: executing program 0 (id=1160): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000240)={0x0, 0x8, 0x8}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000280), 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0xfffffffe, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x10000000, 0xaa, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}}, 0x0) 512.767691ms ago: executing program 0 (id=1161): getpgrp(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) fcntl$dupfd(r2, 0x406, r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f0000000400), 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000200), 0x8, 0x7d, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x10404, 0x2, 0x82, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@delqdisc={0x58, 0x25, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x8, 0x7}, {0x0, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0xce, 0x4}}, @TCA_RATE={0x6, 0x5, {0x9f, 0x2}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x58}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400d856}, 0x4000850) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 484.166976ms ago: executing program 5 (id=1162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="80", 0xfffffe31, 0x48800, 0x0, 0x0) 480.807415ms ago: executing program 7 (id=1163): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 395.60937ms ago: executing program 7 (id=1164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) 395.47016ms ago: executing program 5 (id=1165): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 385.651928ms ago: executing program 5 (id=1166): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) socketpair$unix(0x1, 0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'\x00', {0x2, 0x4e20, @local}}) 349.098082ms ago: executing program 7 (id=1167): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x1216000, 0x800}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 285.20651ms ago: executing program 0 (id=1168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x3c, 0x1b, '\x00', [@generic={0x4, 0x1e, "93b03454ca1d436c658acec6398f9e4a636285d00784c4efbf15bd51f8f6"}, @generic={0x8, 0x6e, "019af346f474055f9b93aa4c67345a63469d8630c29b82619f6e4647143e392c2fb66ee848f56ec27ef78bdf7e8adb5a3a28a1e27459124f61c779a3b9ec444a2e9bcf6e8e9503c42b0bd0e24f5214d543ce90bac52e36814cb167b1d04b94e2c5682ff5bcd77298d55da6a82705"}, @enc_lim={0x4, 0x1, 0x9}, @generic={0xfe, 0x43, "e9e03a025cf998740c21e7d8d52ffa2a24e8b45a3d1e48b78cb6420f904f38de7e04f0531b95bb9bb5d714854039637c6214f9806e108051e28cdf971ddc79c856ef77"}]}, 0xe0) connect$inet6(r0, &(0x7f0000000c80)={0xa, 0x4e24, 0x4, @loopback, 0x100}, 0x1c) 185.691893ms ago: executing program 6 (id=1169): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000002301ee7d00"/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffffe}]}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x10}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x74}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x40, 0x40, 0x7fffffff, 0x6, {{0x19, 0x4, 0x0, 0x5, 0x64, 0x64, 0x0, 0xf5, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0xc2, 0x3, 0xa, [{@local, 0x190b}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xabdd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010101, 0x5}, {@remote, 0x1}, {@multicast1, 0x9}, {@private=0xa010101, 0x7}, {@remote, 0x80000000}]}, @generic={0x89, 0x9, "863dd58c64b09e"}]}}}}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xb}, 0x2002, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x18bd}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0xff, 0x5, 0x4, 0x9d13c1c56c76de6b, @dev={0xfe, 0x80, '\x00', 0x1d}, @private0, 0x700, 0x700, 0x9}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r8}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_FLAGS={0x8, 0x8, 0x104}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x4, 0x10000, 0x28, @dev={0xfe, 0x80, '\x00', 0x13}, @loopback, 0x8000, 0x7800, 0x7, 0x1}}) 71.377833ms ago: executing program 1 (id=1170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x40, 0x5, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}}, 0x800) 0s ago: executing program 1 (id=1171): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000240)={0x0, 0x8, 0x8}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000280), 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0xfffffffe, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x10000000, 0xaa, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}}, 0x0) kernel console output (not intermixed with test programs): ] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.523193][ T4595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.874560][ T28] audit: type=1400 audit(1773009785.857:1255): avc: denied { remount } for pid=5616 comm="syz.5.461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 94.943623][ T5358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.148918][ T28] audit: type=1400 audit(1773009786.175:1256): avc: denied { bind } for pid=5616 comm="syz.5.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.380695][ T5358] veth0_vlan: entered promiscuous mode [ 95.412039][ T5358] veth1_vlan: entered promiscuous mode [ 95.421790][ T5709] loop1: detected capacity change from 0 to 256 [ 95.486653][ T5358] veth0_macvtap: entered promiscuous mode [ 95.532484][ T5358] veth1_macvtap: entered promiscuous mode [ 95.561824][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.572490][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 95.572504][ T28] audit: type=1400 audit(1773009786.606:1262): avc: denied { write } for pid=5719 comm="syz.1.471" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.598977][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.640763][ T28] audit: type=1400 audit(1773009786.643:1263): avc: denied { ioctl } for pid=5719 comm="syz.1.471" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.666903][ T28] audit: type=1400 audit(1773009786.643:1264): avc: denied { ioctl } for pid=5719 comm="syz.1.471" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.715716][ T414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.733917][ T414] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.762447][ T414] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.771451][ T414] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.941680][ T5736] loop6: detected capacity change from 0 to 256 [ 96.266722][ T5772] netlink: 56 bytes leftover after parsing attributes in process `syz.3.477'. [ 96.297692][ T5772] loop3: detected capacity change from 0 to 1024 [ 96.305437][ T5772] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 96.316053][ T5772] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.329922][ T5772] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 96.341155][ T5772] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.350626][ T5772] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.477: Inode bitmap for bg 0 marked uninitialized [ 96.363404][ T5772] loop3: lost filesystem error report for type 5 error -117 [ 96.364520][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 96.378405][ C0] EXT4-fs (loop3): initial error at time 1773009787: ext4_read_inode_bitmap:167 [ 96.387692][ C0] EXT4-fs (loop3): last error at time 1773009787: ext4_read_inode_bitmap:167 [ 96.403748][ T5772] EXT4-fs (loop3): Remounting filesystem read-only [ 96.448256][ T5772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.487759][ T5785] loop5: detected capacity change from 0 to 256 [ 96.561038][ T5795] FAULT_INJECTION: forcing a failure. [ 96.561038][ T5795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.591596][ T5795] CPU: 0 UID: 0 PID: 5795 Comm: syz.5.481 Not tainted syzkaller #0 PREEMPT(full) [ 96.591631][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.591647][ T5795] Call Trace: [ 96.591655][ T5795] [ 96.591664][ T5795] __dump_stack+0x1d/0x30 [ 96.591707][ T5795] dump_stack_lvl+0x95/0xd0 [ 96.591792][ T5795] dump_stack+0x15/0x1b [ 96.591821][ T5795] should_fail_ex+0x263/0x280 [ 96.591879][ T5795] should_fail+0xb/0x20 [ 96.591899][ T5795] should_fail_usercopy+0x1a/0x20 [ 96.591927][ T5795] strncpy_from_user+0x27/0x250 [ 96.591972][ T5795] strncpy_from_bpfptr+0x43/0x50 [ 96.592075][ T5795] bpf_prog_load+0x882/0x1140 [ 96.592122][ T5795] ? security_bpf+0x2b/0x90 [ 96.592157][ T5795] __sys_bpf+0x505/0x7e0 [ 96.592185][ T5795] __x64_sys_bpf+0x41/0x50 [ 96.592228][ T5795] x64_sys_call+0x10cb/0x3020 [ 96.592312][ T5795] do_syscall_64+0x12c/0x370 [ 96.592342][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.592397][ T5795] RIP: 0033:0x7fe744ecc799 [ 96.592416][ T5795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.592438][ T5795] RSP: 002b:00007fe743927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.592512][ T5795] RAX: ffffffffffffffda RBX: 00007fe745145fa0 RCX: 00007fe744ecc799 [ 96.592526][ T5795] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 96.592542][ T5795] RBP: 00007fe743927090 R08: 0000000000000000 R09: 0000000000000000 [ 96.592557][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.592572][ T5795] R13: 00007fe745146038 R14: 00007fe745145fa0 R15: 00007ffe82f65a68 [ 96.592597][ T5795] [ 96.852302][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.023974][ T28] audit: type=1400 audit(1773009787.962:1265): avc: denied { create } for pid=5853 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.067068][ T5859] loop6: detected capacity change from 0 to 256 [ 97.173065][ T5865] loop3: detected capacity change from 0 to 4096 [ 97.319969][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 97.677822][ T5926] loop1: detected capacity change from 0 to 256 [ 97.991612][ T28] audit: type=1326 audit(1773009788.879:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b212c799 code=0x7ffc0000 [ 98.022720][ T5956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.050993][ T5956] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 98.074395][ T5956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 98.089519][ T28] audit: type=1326 audit(1773009788.879:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b212c799 code=0x7ffc0000 [ 98.117657][ T28] audit: type=1326 audit(1773009788.879:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90b212c799 code=0x7ffc0000 [ 98.142150][ T28] audit: type=1326 audit(1773009788.879:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b212c799 code=0x7ffc0000 [ 98.175466][ T28] audit: type=1326 audit(1773009788.879:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b212c799 code=0x7ffc0000 [ 98.202213][ T5956] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 98.235341][ T5956] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 98.263972][ T28] audit: type=1326 audit(1773009788.879:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90b212c799 code=0x7ffc0000 [ 98.294749][ T5956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.386141][ T5956] EXT4-fs error (device loop5): __ext4_remount:6804: comm syz.5.494: Abort forced by user [ 98.423702][ T5956] EXT4-fs (loop5): Remounting filesystem read-only [ 98.524084][ T5956] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 99.090535][ T6029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.316235][ T4791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.728496][ T6022] set_capacity_and_notify: 2 callbacks suppressed [ 99.728517][ T6022] loop1: detected capacity change from 0 to 1024 [ 99.949464][ T6022] ext4: Unknown parameter 'nouser_xattr' [ 100.031619][ T6055] SELinux: syz.5.504 (6055) set checkreqprot to 1. This is no longer supported. [ 100.208274][ T6022] loop1: detected capacity change from 0 to 1024 [ 100.344057][ T6022] EXT4-fs: inline encryption not supported [ 100.617084][ T6109] loop3: detected capacity change from 0 to 256 [ 100.747380][ T6022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.794309][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 100.810505][ T6129] netlink: 44 bytes leftover after parsing attributes in process `syz.5.513'. [ 100.824213][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.512'. [ 100.913345][ T6135] loop5: detected capacity change from 0 to 164 [ 100.920291][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 100.920375][ T28] audit: type=1400 audit(1773009791.620:1307): avc: denied { mounton } for pid=6126 comm="syz.5.513" path="/34/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.961084][ T6022] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.009844][ T6022] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.498: lblock 3 mapped to illegal pblock 3 (length 3) [ 101.072214][ T28] audit: type=1400 audit(1773009791.648:1308): avc: denied { mount } for pid=6126 comm="syz.5.513" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 101.110925][ T6135] loop5: detected capacity change from 0 to 4096 [ 101.117681][ T6135] ext2: Unknown parameter 'fowner' [ 101.123040][ T28] audit: type=1400 audit(1773009791.695:1309): avc: denied { read write } for pid=5988 comm="syz.1.498" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.185529][ T28] audit: type=1400 audit(1773009791.695:1310): avc: denied { open } for pid=5988 comm="syz.1.498" path="/138/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.230339][ T6022] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 101.293501][ T6022] EXT4-fs (loop1): This should not happen!! Data will be lost [ 101.293501][ T6022] [ 101.330459][ T28] audit: type=1400 audit(1773009791.985:1311): avc: denied { unlink } for pid=4791 comm="syz-executor" name="file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.755557][ T6208] loop3: detected capacity change from 0 to 256 [ 102.003023][ T6224] bridge0: entered promiscuous mode [ 102.055137][ T6224] bridge0: port 3(macsec1) entered blocking state [ 102.080711][ T6224] bridge0: port 3(macsec1) entered disabled state [ 102.252639][ T6224] macsec1: entered allmulticast mode [ 102.316099][ T6224] bridge0: entered allmulticast mode [ 102.473506][ T6224] macsec1: left allmulticast mode [ 102.478717][ T6224] bridge0: left allmulticast mode [ 102.506655][ T6224] bridge0: left promiscuous mode [ 102.771796][ T28] audit: type=1400 audit(1773009793.332:1312): avc: denied { append } for pid=6251 comm="syz.6.524" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.016005][ T6121] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 103.649579][ T6320] netlink: 48 bytes leftover after parsing attributes in process `syz.3.529'. [ 103.726408][ T6324] loop5: detected capacity change from 0 to 512 [ 103.759253][ T6324] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.898642][ T5256] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:23: lblock 8 mapped to illegal pblock 8 (length 8) [ 103.996045][ T6324] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 104.013295][ T5256] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 104.031655][ T6324] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.530: bg 0: block 248: padding at end of block bitmap is not set [ 104.060585][ T6324] loop5: lost filesystem error report for type 5 error -117 [ 104.060791][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 104.074683][ C1] EXT4-fs (loop5): last error at time 1773009794: ext4_validate_block_bitmap:441 [ 104.107387][ T5256] EXT4-fs (loop1): This should not happen!! Data will be lost [ 104.107387][ T5256] [ 104.125062][ T6324] Quota error (device loop5): write_blk: dquota write failed [ 104.148751][ T6375] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 104.168830][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.169978][ T6324] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 104.217085][ T6324] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.530: Failed to acquire dquot type 1 [ 104.229440][ T6324] loop5: lost filesystem error report for type 5 error -117 [ 104.240265][ T28] audit: type=1400 audit(1773009794.717:1313): avc: denied { bind } for pid=6376 comm="syz.6.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.280213][ T6324] EXT4-fs (loop5): 1 truncate cleaned up [ 104.286986][ T6324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 104.327040][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.339070][ T28] audit: type=1400 audit(1773009794.717:1314): avc: denied { name_bind } for pid=6376 comm="syz.6.533" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 104.384993][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.447581][ T6383] veth0: entered promiscuous mode [ 104.454136][ T6383] veth0: left promiscuous mode [ 104.635428][ T6389] syz.1.531 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 104.678054][ T6389] 9pnet_fd: Insufficient options for proto=fd [ 104.808498][ T6324] syz.5.530 (6324) used greatest stack depth: 9160 bytes left [ 104.843389][ T6391] loop1: detected capacity change from 0 to 512 [ 104.917205][ T6391] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.531: bg 0: block 5: invalid block bitmap [ 104.937414][ T6391] loop1: lost filesystem error report for type 5 error -117 [ 104.937726][ T6391] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 104.953817][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 104.953839][ C0] EXT4-fs (loop1): initial error at time 1773009795: ext4_validate_block_bitmap:432 [ 104.953869][ C0] EXT4-fs (loop1): last error at time 1773009795: ext4_validate_block_bitmap:432 [ 104.981145][ T6391] loop1: lost filesystem error report for type 5 error -117 [ 104.981381][ T6391] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.531: invalid indirect mapped block 3 (level 2) [ 105.002633][ T6391] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.002970][ T6391] EXT4-fs (loop1): 1 orphan inode deleted [ 105.021123][ T6391] EXT4-fs (loop1): 1 truncate cleaned up [ 105.027676][ T6391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.041611][ T6391] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.189366][ T6403] loop6: detected capacity change from 0 to 128 [ 105.219911][ T6405] loop3: detected capacity change from 0 to 256 [ 105.253083][ T6397] syzkaller0: entered promiscuous mode [ 105.293218][ T6397] syzkaller0: entered allmulticast mode [ 105.578059][ T6423] loop1: detected capacity change from 0 to 512 [ 105.606464][ T3921] bio_check_eod: 42270 callbacks suppressed [ 105.606482][ T3921] kworker/u8:8: attempt to access beyond end of device [ 105.606482][ T3921] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 105.644357][ T6423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.672565][ T3921] kworker/u8:8: attempt to access beyond end of device [ 105.672565][ T3921] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 105.696509][ T6423] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.712010][ T3921] kworker/u8:8: attempt to access beyond end of device [ 105.712010][ T3921] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 105.756478][ T3921] kworker/u8:8: attempt to access beyond end of device [ 105.756478][ T3921] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 105.777976][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.798057][ T3921] kworker/u8:8: attempt to access beyond end of device [ 105.798057][ T3921] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 105.831708][ T3921] kworker/u8:8: attempt to access beyond end of device [ 105.831708][ T3921] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 105.865335][ T3921] kworker/u8:8: attempt to access beyond end of device [ 105.865335][ T3921] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 105.923338][ T3921] kworker/u8:8: attempt to access beyond end of device [ 105.923338][ T3921] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 105.977899][ T3921] kworker/u8:8: attempt to access beyond end of device [ 105.977899][ T3921] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 106.027243][ T3921] kworker/u8:8: attempt to access beyond end of device [ 106.027243][ T3921] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 106.256140][ T4791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 106.302930][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 106.302948][ T28] audit: type=1400 audit(1773009796.644:1325): avc: denied { cmd } for pid=6487 comm="syz.3.547" path="socket:[12972]" dev="sockfs" ino=12972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.523341][ T6498] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 106.541272][ T6498] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.761488][ T6518] FAULT_INJECTION: forcing a failure. [ 106.761488][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 106.795019][ T28] audit: type=1400 audit(1773009797.102:1326): avc: denied { getopt } for pid=6519 comm="syz.6.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.829327][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.1.552 Not tainted syzkaller #0 PREEMPT(full) [ 106.829425][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.829441][ T6518] Call Trace: [ 106.829449][ T6518] [ 106.829458][ T6518] __dump_stack+0x1d/0x30 [ 106.829492][ T6518] dump_stack_lvl+0x95/0xd0 [ 106.829523][ T6518] dump_stack+0x15/0x1b [ 106.829589][ T6518] should_fail_ex+0x263/0x280 [ 106.829680][ T6518] should_failslab+0x8c/0xb0 [ 106.829704][ T6518] kmem_cache_alloc_noprof+0x66/0x400 [ 106.829767][ T6518] ? skb_clone+0x151/0x1f0 [ 106.829835][ T6518] skb_clone+0x151/0x1f0 [ 106.829871][ T6518] __netlink_deliver_tap+0x2c9/0x500 [ 106.829990][ T6518] netlink_unicast+0x66b/0x690 [ 106.830025][ T6518] netlink_sendmsg+0x5c8/0x6f0 [ 106.830129][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.830165][ T6518] ____sys_sendmsg+0x563/0x5b0 [ 106.830204][ T6518] ___sys_sendmsg+0x195/0x1e0 [ 106.830311][ T6518] __x64_sys_sendmsg+0xd4/0x160 [ 106.830370][ T6518] x64_sys_call+0x194c/0x3020 [ 106.830444][ T6518] do_syscall_64+0x12c/0x370 [ 106.830473][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.830501][ T6518] RIP: 0033:0x7f90b212c799 [ 106.830519][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.830542][ T6518] RSP: 002b:00007f90b0b7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.830628][ T6518] RAX: ffffffffffffffda RBX: 00007f90b23a5fa0 RCX: 00007f90b212c799 [ 106.830646][ T6518] RDX: 00000000000040d0 RSI: 0000200000000100 RDI: 0000000000000003 [ 106.830662][ T6518] RBP: 00007f90b0b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.830676][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.830689][ T6518] R13: 00007f90b23a6038 R14: 00007f90b23a5fa0 R15: 00007fff23af9ab8 [ 106.830712][ T6518] [ 107.212294][ T6531] IPv6: addrconf: prefix option has invalid lifetime [ 107.274029][ T28] audit: type=1326 audit(1773009797.551:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52592ac799 code=0x7ffc0000 [ 107.343855][ T28] audit: type=1326 audit(1773009797.589:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52592ac799 code=0x7ffc0000 [ 107.383364][ T6542] FAULT_INJECTION: forcing a failure. [ 107.383364][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 107.404900][ T6534] loop3: detected capacity change from 0 to 8192 [ 107.416264][ T28] audit: type=1326 audit(1773009797.589:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f52592ac799 code=0x7ffc0000 [ 107.440311][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.6.559 Not tainted syzkaller #0 PREEMPT(full) [ 107.440341][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.440353][ T6542] Call Trace: [ 107.440360][ T6542] [ 107.440449][ T6542] __dump_stack+0x1d/0x30 [ 107.440476][ T6542] dump_stack_lvl+0x95/0xd0 [ 107.440499][ T6542] dump_stack+0x15/0x1b [ 107.440574][ T6542] should_fail_ex+0x263/0x280 [ 107.440599][ T6542] should_failslab+0x8c/0xb0 [ 107.440620][ T6542] __kmalloc_noprof+0xb8/0x4e0 [ 107.440643][ T6542] ? kernfs_fop_write_iter+0xe2/0x300 [ 107.440800][ T6542] kernfs_fop_write_iter+0xe2/0x300 [ 107.440853][ T6542] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 107.440960][ T6542] vfs_write+0x5a6/0x9f0 [ 107.441085][ T6542] ksys_write+0xdc/0x1a0 [ 107.441108][ T6542] __x64_sys_write+0x40/0x50 [ 107.441166][ T6542] x64_sys_call+0x27e1/0x3020 [ 107.441200][ T6542] do_syscall_64+0x12c/0x370 [ 107.441227][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.441267][ T6542] RIP: 0033:0x7f6c44ebc799 [ 107.441282][ T6542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.441299][ T6542] RSP: 002b:00007f6c43917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.441320][ T6542] RAX: ffffffffffffffda RBX: 00007f6c45135fa0 RCX: 00007f6c44ebc799 [ 107.441398][ T6542] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000005 [ 107.441412][ T6542] RBP: 00007f6c43917090 R08: 0000000000000000 R09: 0000000000000000 [ 107.441427][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.441447][ T6542] R13: 00007f6c45136038 R14: 00007f6c45135fa0 R15: 00007ffc36730178 [ 107.441513][ T6542] [ 107.631088][ T28] audit: type=1326 audit(1773009797.589:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52592ac502 code=0x7ffc0000 [ 107.661220][ T28] audit: type=1326 audit(1773009797.607:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f525926cfce code=0x7ffc0000 [ 107.684440][ T28] audit: type=1400 audit(1773009797.654:1332): avc: denied { mount } for pid=6540 comm="syz.6.559" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.708078][ T28] audit: type=1326 audit(1773009797.673:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f52592ac5c7 code=0x7ffc0000 [ 107.731656][ T28] audit: type=1326 audit(1773009797.673:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f525926cfce code=0x7ffc0000 [ 107.758385][ T6547] 9p: Bad value for 'rfdno' [ 107.819495][ T6549] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 107.831560][ T10] IPVS: starting estimator thread 0... [ 107.921158][ T6564] bond2 (unregistering): Released all slaves [ 107.930485][ T6560] IPVS: using max 2448 ests per chain, 122400 per kthread [ 108.030248][ T6579] netlink: 'syz.6.566': attribute type 1 has an invalid length. [ 108.114028][ T6579] netlink: 'syz.6.566': attribute type 21 has an invalid length. [ 108.122612][ T6579] netlink: 132 bytes leftover after parsing attributes in process `syz.6.566'. [ 108.210876][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 108.346337][ T6609] FAULT_INJECTION: forcing a failure. [ 108.346337][ T6609] name failslab, interval 1, probability 0, space 0, times 0 [ 108.360798][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.0.575 Not tainted syzkaller #0 PREEMPT(full) [ 108.360875][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.360891][ T6609] Call Trace: [ 108.360899][ T6609] [ 108.360907][ T6609] __dump_stack+0x1d/0x30 [ 108.361044][ T6609] dump_stack_lvl+0x95/0xd0 [ 108.361067][ T6609] dump_stack+0x15/0x1b [ 108.361089][ T6609] should_fail_ex+0x263/0x280 [ 108.361120][ T6609] should_failslab+0x8c/0xb0 [ 108.361213][ T6609] __kmalloc_noprof+0xb8/0x4e0 [ 108.361235][ T6609] ? fib6_info_alloc+0x2e/0x90 [ 108.361318][ T6609] fib6_info_alloc+0x2e/0x90 [ 108.361356][ T6609] ip6_route_info_create+0xe9/0x4f0 [ 108.361381][ T6609] ip6_route_add+0x49/0x170 [ 108.361401][ T6609] inet6_rtm_newroute+0x142/0x1150 [ 108.361448][ T6609] ? selinux_capable+0x31/0x40 [ 108.361485][ T6609] ? security_capable+0x7b/0x90 [ 108.361556][ T6609] ? ns_capable+0x7c/0xb0 [ 108.361580][ T6609] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 108.361697][ T6609] rtnetlink_rcv_msg+0x64b/0x720 [ 108.361745][ T6609] netlink_rcv_skb+0x123/0x220 [ 108.361780][ T6609] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.361829][ T6609] rtnetlink_rcv+0x1c/0x30 [ 108.361918][ T6609] netlink_unicast+0x5c0/0x690 [ 108.361951][ T6609] netlink_sendmsg+0x5c8/0x6f0 [ 108.361992][ T6609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.362087][ T6609] ____sys_sendmsg+0x563/0x5b0 [ 108.362129][ T6609] ___sys_sendmsg+0x195/0x1e0 [ 108.362195][ T6609] __x64_sys_sendmsg+0xd4/0x160 [ 108.362236][ T6609] x64_sys_call+0x194c/0x3020 [ 108.362269][ T6609] do_syscall_64+0x12c/0x370 [ 108.362291][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.362319][ T6609] RIP: 0033:0x7f4c0fcbc799 [ 108.362365][ T6609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.362388][ T6609] RSP: 002b:00007f4c0e717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.362413][ T6609] RAX: ffffffffffffffda RBX: 00007f4c0ff35fa0 RCX: 00007f4c0fcbc799 [ 108.362431][ T6609] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000b [ 108.362452][ T6609] RBP: 00007f4c0e717090 R08: 0000000000000000 R09: 0000000000000000 [ 108.362486][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.362502][ T6609] R13: 00007f4c0ff36038 R14: 00007f4c0ff35fa0 R15: 00007ffca5108198 [ 108.362524][ T6609] [ 108.612382][ T6579] loop6: detected capacity change from 0 to 512 [ 108.619391][ T6579] vfat: Unknown parameter 'ÿÿ [ 108.619391][ T6579] ' [ 108.693577][ T6615] loop3: detected capacity change from 0 to 8192 [ 108.795503][ T6627] netlink: 100 bytes leftover after parsing attributes in process `syz.6.581'. [ 108.805264][ T6627] netlink: 100 bytes leftover after parsing attributes in process `syz.6.581'. [ 108.847395][ T6630] syzkaller0: entered promiscuous mode [ 108.854481][ T6630] syzkaller0: entered allmulticast mode [ 108.976039][ T6634] loop5: detected capacity change from 0 to 512 [ 108.988774][ T6634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.996551][ T6634] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 109.020797][ T6634] EXT4-fs (loop5): 1 truncate cleaned up [ 109.027098][ T6634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.059871][ T6634] netlink: 132 bytes leftover after parsing attributes in process `syz.5.584'. [ 109.182734][ T6642] netlink: 56 bytes leftover after parsing attributes in process `syz.1.586'. [ 109.225246][ T6642] loop1: detected capacity change from 0 to 1024 [ 109.242556][ T6642] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 109.283222][ T6642] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.354435][ T6642] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 109.391851][ T6642] EXT4-fs (loop1): orphan cleanup on readonly fs [ 109.418655][ T6642] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.586: Inode bitmap for bg 0 marked uninitialized [ 109.469682][ T6642] loop1: lost filesystem error report for type 5 error -117 [ 109.470309][ T6642] EXT4-fs (loop1): Remounting filesystem read-only [ 109.484264][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 109.484289][ C1] EXT4-fs (loop1): initial error at time 1773009799: ext4_read_inode_bitmap:167 [ 109.484329][ C1] EXT4-fs (loop1): last error at time 1773009799: ext4_read_inode_bitmap:167 [ 109.756776][ T6642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.776652][ T6649] loop6: detected capacity change from 0 to 512 [ 109.798204][ T6649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.841521][ T6649] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 109.853286][ T6649] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 109.876066][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.948146][ T4791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.177283][ T6668] netlink: 100 bytes leftover after parsing attributes in process `syz.0.592'. [ 110.186809][ T6668] netlink: 100 bytes leftover after parsing attributes in process `syz.0.592'. [ 110.232650][ T6674] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 110.307306][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'. [ 111.063185][ T6702] syzkaller0: entered promiscuous mode [ 111.097364][ T6702] syzkaller0: entered allmulticast mode [ 111.306855][ T6718] netlink: 100 bytes leftover after parsing attributes in process `syz.5.605'. [ 111.334035][ T6718] netlink: 100 bytes leftover after parsing attributes in process `syz.5.605'. [ 111.422310][ T6724] FAULT_INJECTION: forcing a failure. [ 111.422310][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 111.435725][ T6726] IPv6: addrconf: prefix option has invalid lifetime [ 111.441470][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.5.608 Not tainted syzkaller #0 PREEMPT(full) [ 111.441646][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.441687][ T6724] Call Trace: [ 111.441707][ T6724] [ 111.441730][ T6724] __dump_stack+0x1d/0x30 [ 111.441860][ T6724] dump_stack_lvl+0x95/0xd0 [ 111.442004][ T6724] dump_stack+0x15/0x1b [ 111.442076][ T6724] should_fail_ex+0x263/0x280 [ 111.442156][ T6724] should_failslab+0x8c/0xb0 [ 111.442220][ T6724] __kmalloc_noprof+0xb8/0x4e0 [ 111.442302][ T6724] ? kernfs_fop_write_iter+0xe2/0x300 [ 111.442478][ T6724] kernfs_fop_write_iter+0xe2/0x300 [ 111.442586][ T6724] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 111.442729][ T6724] vfs_write+0x5a6/0x9f0 [ 111.442926][ T6724] ksys_write+0xdc/0x1a0 [ 111.442990][ T6724] __x64_sys_write+0x40/0x50 [ 111.443052][ T6724] x64_sys_call+0x27e1/0x3020 [ 111.443144][ T6724] do_syscall_64+0x12c/0x370 [ 111.443238][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.443310][ T6724] RIP: 0033:0x7fe744ecc799 [ 111.443355][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.443424][ T6724] RSP: 002b:00007fe743927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.443487][ T6724] RAX: ffffffffffffffda RBX: 00007fe745145fa0 RCX: 00007fe744ecc799 [ 111.443557][ T6724] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000005 [ 111.443599][ T6724] RBP: 00007fe743927090 R08: 0000000000000000 R09: 0000000000000000 [ 111.443634][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.443676][ T6724] R13: 00007fe745146038 R14: 00007fe745145fa0 R15: 00007ffe82f65a68 [ 111.443723][ T6724] [ 111.447256][ T6727] netlink: 'syz.1.606': attribute type 7 has an invalid length. [ 111.627456][ T6727] netlink: 'syz.1.606': attribute type 8 has an invalid length. [ 111.647992][ T6731] netlink: 56 bytes leftover after parsing attributes in process `syz.0.610'. [ 111.691073][ T6733] loop1: detected capacity change from 0 to 256 [ 111.710023][ T28] kauditd_printk_skb: 188 callbacks suppressed [ 111.710040][ T28] audit: type=1400 audit(1773009801.705:1523): avc: denied { mounton } for pid=6732 comm="syz.1.611" path="/151/file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.741216][ T28] audit: type=1400 audit(1773009801.733:1524): avc: denied { mount } for pid=6732 comm="syz.1.611" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 111.807327][ T28] audit: type=1400 audit(1773009801.799:1525): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 111.932501][ T28] audit: type=1400 audit(1773009801.827:1526): avc: denied { execmem } for pid=6736 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 112.005329][ T28] audit: type=1400 audit(1773009801.901:1527): avc: denied { create } for pid=6738 comm="syz.5.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.025104][ T28] audit: type=1400 audit(1773009801.939:1528): avc: denied { create } for pid=6736 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.045339][ T28] audit: type=1400 audit(1773009801.939:1529): avc: denied { setopt } for pid=6736 comm="syz.0.614" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.087943][ T6745] syzkaller0: entered promiscuous mode [ 112.093657][ T6745] syzkaller0: entered allmulticast mode [ 112.131523][ T28] audit: type=1400 audit(1773009801.939:1530): avc: denied { write } for pid=6736 comm="syz.0.614" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.204361][ T28] audit: type=1400 audit(1773009802.163:1531): avc: denied { allowed } for pid=6738 comm="syz.5.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 112.242822][ T28] audit: type=1400 audit(1773009802.163:1532): avc: denied { create } for pid=6738 comm="syz.5.613" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.269997][ T6753] netlink: 100 bytes leftover after parsing attributes in process `syz.0.618'. [ 112.279326][ T6748] loop1: detected capacity change from 0 to 1024 [ 112.280534][ T6753] netlink: 100 bytes leftover after parsing attributes in process `syz.0.618'. [ 112.286790][ T6748] EXT4-fs: Ignoring removed nobh option [ 112.300398][ T6748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.366467][ T6748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.598710][ T6764] loop6: detected capacity change from 0 to 4096 [ 112.773819][ T6764] loop6: detected capacity change from 0 to 2048 [ 112.815831][ T3301] loop6: p1 < > p4 [ 112.822211][ T3301] loop6: p4 size 8388608 extends beyond EOD, truncated [ 112.887100][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.905407][ T6764] loop6: p1 < > p4 [ 112.919112][ T6764] loop6: p4 size 8388608 extends beyond EOD, truncated [ 112.944843][ T3001] loop6: p1 < > p4 [ 112.954524][ T3001] loop6: p4 size 8388608 extends beyond EOD, truncated [ 113.035742][ T6771] loop5: detected capacity change from 0 to 1024 [ 113.071304][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 113.075411][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 113.100409][ T6771] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 113.120519][ T6777] loop1: detected capacity change from 0 to 4096 [ 113.137872][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 113.137884][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 113.164729][ T6771] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.229648][ T6777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.273197][ T6771] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 113.281699][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 113.282599][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 113.317021][ T6771] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.341545][ T6771] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.624: Inode bitmap for bg 0 marked uninitialized [ 113.364524][ T6771] loop5: lost filesystem error report for type 5 error -117 [ 113.367527][ T6771] EXT4-fs (loop5): Remounting filesystem read-only [ 113.375239][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 113.375262][ C1] EXT4-fs (loop5): initial error at time 1773009803: ext4_read_inode_bitmap:167 [ 113.375292][ C1] EXT4-fs (loop5): last error at time 1773009803: ext4_read_inode_bitmap:167 [ 113.433558][ T6771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.460494][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.490010][ T6796] FAULT_INJECTION: forcing a failure. [ 113.490010][ T6796] name failslab, interval 1, probability 0, space 0, times 0 [ 113.521674][ T6796] CPU: 0 UID: 0 PID: 6796 Comm: syz.0.632 Not tainted syzkaller #0 PREEMPT(full) [ 113.521744][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.521757][ T6796] Call Trace: [ 113.521764][ T6796] [ 113.521771][ T6796] __dump_stack+0x1d/0x30 [ 113.521848][ T6796] dump_stack_lvl+0x95/0xd0 [ 113.521878][ T6796] dump_stack+0x15/0x1b [ 113.521906][ T6796] should_fail_ex+0x263/0x280 [ 113.521986][ T6796] should_failslab+0x8c/0xb0 [ 113.522084][ T6796] kmem_cache_alloc_noprof+0x66/0x400 [ 113.522139][ T6796] ? skb_clone+0x151/0x1f0 [ 113.522176][ T6796] skb_clone+0x151/0x1f0 [ 113.522230][ T6796] __netlink_deliver_tap+0x2c9/0x500 [ 113.522264][ T6796] netlink_dump+0x836/0x8a0 [ 113.522342][ T6796] __netlink_dump_start+0x43e/0x520 [ 113.522380][ T6796] ip_set_dump+0xa4/0xf0 [ 113.522462][ T6796] ? __pfx_ip_set_dump_start+0x10/0x10 [ 113.522570][ T6796] ? __pfx_ip_set_dump_do+0x10/0x10 [ 113.522600][ T6796] ? __pfx_ip_set_dump_done+0x10/0x10 [ 113.522638][ T6796] nfnetlink_rcv_msg+0x509/0x5d0 [ 113.522699][ T6796] netlink_rcv_skb+0x123/0x220 [ 113.522734][ T6796] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 113.522765][ T6796] nfnetlink_rcv+0x167/0x1720 [ 113.522791][ T6796] ? __kfree_skb+0x109/0x150 [ 113.522851][ T6796] ? nlmon_xmit+0x4f/0x60 [ 113.522881][ T6796] ? consume_skb+0x4b/0x160 [ 113.522904][ T6796] ? nlmon_xmit+0x4f/0x60 [ 113.522991][ T6796] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 113.523020][ T6796] ? __dev_queue_xmit+0x136c/0x1f20 [ 113.523053][ T6796] ? __dev_queue_xmit+0x148/0x1f20 [ 113.523128][ T6796] ? ref_tracker_free+0x37d/0x3e0 [ 113.523164][ T6796] ? __netlink_deliver_tap+0x4dc/0x500 [ 113.523252][ T6796] netlink_unicast+0x5c0/0x690 [ 113.523325][ T6796] netlink_sendmsg+0x5c8/0x6f0 [ 113.523365][ T6796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.523465][ T6796] ____sys_sendmsg+0x563/0x5b0 [ 113.523506][ T6796] ___sys_sendmsg+0x195/0x1e0 [ 113.523561][ T6796] __x64_sys_sendmsg+0xd4/0x160 [ 113.523600][ T6796] x64_sys_call+0x194c/0x3020 [ 113.523775][ T6796] do_syscall_64+0x12c/0x370 [ 113.523842][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.523866][ T6796] RIP: 0033:0x7f4c0fcbc799 [ 113.523882][ T6796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.523900][ T6796] RSP: 002b:00007f4c0e717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.523933][ T6796] RAX: ffffffffffffffda RBX: 00007f4c0ff35fa0 RCX: 00007f4c0fcbc799 [ 113.524003][ T6796] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 113.524020][ T6796] RBP: 00007f4c0e717090 R08: 0000000000000000 R09: 0000000000000000 [ 113.524036][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.524109][ T6796] R13: 00007f4c0ff36038 R14: 00007f4c0ff35fa0 R15: 00007ffca5108198 [ 113.524129][ T6796] [ 113.524627][ T4791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.861493][ T6803] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 114.059373][ T6821] loop1: detected capacity change from 0 to 512 [ 114.105503][ T6821] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.114804][ T6821] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 114.128259][ T6821] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 114.136547][ T6821] System zones: 0-2, 18-18, 34-35 [ 114.143297][ T6821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 114.618271][ T6839] syz.5.640 uses obsolete (PF_INET,SOCK_PACKET) [ 114.655917][ T6843] __nla_validate_parse: 4 callbacks suppressed [ 114.655966][ T6843] netlink: 100 bytes leftover after parsing attributes in process `syz.6.642'. [ 114.680810][ T6838] loop5: detected capacity change from 0 to 1024 [ 114.718496][ T6846] netlink: 100 bytes leftover after parsing attributes in process `syz.6.642'. [ 115.607995][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.694014][ T6887] loop1: detected capacity change from 0 to 512 [ 115.735711][ T6887] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.778238][ T6885] loop6: detected capacity change from 0 to 256 [ 115.785340][ T6887] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 115.799699][ T6894] netlink: 100 bytes leftover after parsing attributes in process `syz.3.653'. [ 115.814993][ T6885] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 115.819520][ T6887] EXT4-fs (loop1): 1 truncate cleaned up [ 115.840961][ T6894] netlink: 100 bytes leftover after parsing attributes in process `syz.3.653'. [ 115.862329][ T6887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.959077][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.011682][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 116.116446][ T6905] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 116.146771][ T6905] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.165586][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.656'. [ 116.181881][ T6905] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 116.208031][ T6905] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.216841][ T6905] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.654: Inode bitmap for bg 0 marked uninitialized [ 116.236016][ T6905] loop1: lost filesystem error report for type 5 error -117 [ 116.236221][ T6905] EXT4-fs (loop1): Remounting filesystem read-only [ 116.250127][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 116.250150][ C0] EXT4-fs (loop1): initial error at time 1773009805: ext4_read_inode_bitmap:167 [ 116.250176][ C0] EXT4-fs (loop1): last error at time 1773009805: ext4_read_inode_bitmap:167 [ 116.378590][ T6905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.405231][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.656'. [ 116.546624][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 116.563680][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.914379][ T6923] 9p: Bad value for 'wfdno' [ 117.050880][ T6947] set_capacity_and_notify: 2 callbacks suppressed [ 117.050902][ T6947] loop6: detected capacity change from 0 to 128 [ 117.122066][ T6953] netlink: 100 bytes leftover after parsing attributes in process `syz.3.665'. [ 117.161467][ T6953] netlink: 100 bytes leftover after parsing attributes in process `syz.3.665'. [ 117.305532][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 117.305548][ T28] audit: type=1400 audit(1773009806.944:1588): avc: denied { read } for pid=6959 comm="syz.3.666" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.389274][ T28] audit: type=1400 audit(1773009807.019:1589): avc: denied { create } for pid=6959 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.437811][ T28] audit: type=1400 audit(1773009807.065:1590): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 117.513798][ T6971] loop1: detected capacity change from 0 to 1024 [ 117.532065][ T6971] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 117.548380][ T6971] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.574268][ T6971] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 117.585870][ T6971] EXT4-fs (loop1): orphan cleanup on readonly fs [ 117.594950][ T6971] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.668: Inode bitmap for bg 0 marked uninitialized [ 117.607772][ T6971] loop1: lost filesystem error report for type 5 error -117 [ 117.608876][ T6971] EXT4-fs (loop1): Remounting filesystem read-only [ 117.616313][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 117.616330][ C1] EXT4-fs (loop1): initial error at time 1773009807: ext4_read_inode_bitmap:167 [ 117.616350][ C1] EXT4-fs (loop1): last error at time 1773009807: ext4_read_inode_bitmap:167 [ 117.648039][ T6971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.671276][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.719754][ T6986] loop1: detected capacity change from 0 to 256 [ 117.869610][ T6999] loop1: detected capacity change from 0 to 512 [ 118.059989][ T28] audit: type=1400 audit(1773009807.646:1591): avc: denied { getopt } for pid=7035 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.163036][ T7044] 9p: Bad value for 'wfdno' [ 118.263243][ T7048] loop3: detected capacity change from 0 to 128 [ 118.400253][ T28] audit: type=1400 audit(1773009807.954:1592): avc: denied { mounton } for pid=7047 comm="syz.3.677" path="/121/file0/file0" dev="loop3" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 118.519524][ T28] audit: type=1400 audit(1773009808.076:1593): avc: denied { setopt } for pid=7056 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.607017][ T7065] loop6: detected capacity change from 0 to 128 [ 118.621922][ T7065] msdos: Unknown parameter '' [ 118.652574][ T28] audit: type=1400 audit(1773009808.197:1594): avc: denied { create } for pid=7068 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.704920][ T28] audit: type=1400 audit(1773009808.197:1595): avc: denied { connect } for pid=7068 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.756344][ T28] audit: type=1400 audit(1773009808.207:1596): avc: denied { write } for pid=7068 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.777228][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.794701][ T28] audit: type=1400 audit(1773009808.338:1597): avc: denied { cpu } for pid=7064 comm="syz.6.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.828025][ T7073] loop1: detected capacity change from 0 to 1024 [ 118.840402][ T7073] EXT4-fs: Ignoring removed oldalloc option [ 118.847045][ T7073] EXT4-fs: Ignoring removed bh option [ 118.859114][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.871339][ T7073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.937862][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.061912][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.253048][ T50] bridge_slave_1: left allmulticast mode [ 119.259397][ T50] bridge_slave_1: left promiscuous mode [ 119.265976][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.294216][ T50] bridge_slave_0: left allmulticast mode [ 119.300310][ T50] bridge_slave_0: left promiscuous mode [ 119.306214][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.787154][ T7106] 9p: Bad value for 'wfdno' [ 119.792154][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.849422][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.868081][ T50] bond0 (unregistering): Released all slaves [ 120.019147][ T50] hsr_slave_0: left promiscuous mode [ 120.049267][ T50] hsr_slave_1: left promiscuous mode [ 120.055490][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.073691][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.081197][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.117248][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.124758][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.180273][ T50] veth1_macvtap: left promiscuous mode [ 120.185822][ T50] veth0_macvtap: left promiscuous mode [ 120.201644][ T50] veth1_vlan: left promiscuous mode [ 120.207028][ T50] veth0_vlan: left promiscuous mode [ 120.456944][ T50] team0 (unregistering): Port device team_slave_1 removed [ 120.472831][ T50] team0 (unregistering): Port device team_slave_0 removed [ 120.607841][ T7078] chnl_net:caif_netlink_parms(): no params data found [ 120.748606][ T7078] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.763912][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.778960][ T7078] bridge_slave_0: entered allmulticast mode [ 120.793865][ T7078] bridge_slave_0: entered promiscuous mode [ 120.823479][ T50] IPVS: stop unused estimator thread 0... [ 120.833129][ T7078] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.855692][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.872707][ T7078] bridge_slave_1: entered allmulticast mode [ 120.887754][ T7078] bridge_slave_1: entered promiscuous mode [ 120.899297][ T7126] loop1: detected capacity change from 0 to 1024 [ 120.930348][ T7126] EXT4-fs: Ignoring removed bh option [ 120.951939][ T7078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.978716][ T7078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.000002][ T7126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.055956][ T7078] team0: Port device team_slave_0 added [ 121.064612][ T7078] team0: Port device team_slave_1 added [ 121.120025][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.129048][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.138693][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.187145][ T7078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.228752][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.235774][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.262751][ T7078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.276800][ T7184] syzkaller0: entered promiscuous mode [ 121.283057][ T7184] syzkaller0: entered allmulticast mode [ 121.317734][ T7078] hsr_slave_0: entered promiscuous mode [ 121.324158][ T7078] hsr_slave_1: entered promiscuous mode [ 121.495956][ T7078] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 121.530442][ T7078] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 121.554732][ T7078] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 121.593372][ T7078] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 121.602810][ T7218] loop6: detected capacity change from 0 to 256 [ 121.707421][ T7078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.728701][ T7078] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.767630][ T7235] loop5: detected capacity change from 0 to 1024 [ 121.787646][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.794777][ T5255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.804227][ T7235] ext2: Unknown parameter 'smackfstransmute' [ 121.812181][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.819349][ T5255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.865529][ T7078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.905200][ T7240] syzkaller0: entered promiscuous mode [ 121.911524][ T7240] syzkaller0: entered allmulticast mode [ 122.032671][ T7078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.261839][ T7078] veth0_vlan: entered promiscuous mode [ 122.273126][ T7078] veth1_vlan: entered promiscuous mode [ 122.294146][ T7078] veth0_macvtap: entered promiscuous mode [ 122.302415][ T7078] veth1_macvtap: entered promiscuous mode [ 122.314036][ T7078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.326165][ T7078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.339213][ T4605] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.364475][ T4605] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.386531][ T4605] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.400961][ T4605] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.448950][ T7281] set_capacity_and_notify: 1 callbacks suppressed [ 122.448965][ T7281] loop6: detected capacity change from 0 to 1024 [ 122.471487][ T7281] ext2: Unknown parameter 'smackfstransmute' [ 122.520692][ T7286] __nla_validate_parse: 3 callbacks suppressed [ 122.520721][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.688'. [ 122.627856][ T7292] syzkaller0: entered promiscuous mode [ 122.634496][ T7292] syzkaller0: entered allmulticast mode [ 122.769245][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 122.769271][ T28] audit: type=1400 audit(1773009812.042:1620): avc: denied { sqpoll } for pid=7287 comm="syz.6.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 122.812299][ T28] audit: type=1400 audit(1773009812.042:1621): avc: denied { write } for pid=7287 comm="syz.6.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.106699][ T7301] loop5: detected capacity change from 0 to 512 [ 123.218815][ T7301] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.730: invalid indirect mapped block 256 (level 2) [ 123.363578][ T7301] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.365147][ T7301] EXT4-fs (loop5): 2 truncates cleaned up [ 123.374448][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 123.374469][ C1] EXT4-fs (loop5): initial error at time 1773009812: ext4_free_branches:1023: inode 11 [ 123.374515][ C1] EXT4-fs (loop5): last error at time 1773009812: ext4_free_branches:1023: inode 11 [ 123.507557][ T28] audit: type=1400 audit(1773009812.744:1622): avc: denied { create } for pid=7311 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 123.536342][ T7301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.141773][ T28] audit: type=1400 audit(1773009813.333:1623): avc: denied { create } for pid=7311 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.561594][ T7325] loop1: detected capacity change from 0 to 1024 [ 124.571820][ T7325] ext2: Unknown parameter 'smackfstransmute' [ 124.602689][ T7329] syzkaller0: entered promiscuous mode [ 124.608268][ T7329] syzkaller0: entered allmulticast mode [ 124.669493][ T5255] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:22: bg 0: block 5: invalid block bitmap [ 124.683743][ T5255] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 124.696596][ T5255] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.696596][ T5255] [ 124.706541][ T5255] EXT4-fs (loop5): Total free blocks count 0 [ 124.712941][ T5255] EXT4-fs (loop5): Free/Dirty block details [ 124.758122][ T5255] EXT4-fs (loop5): free_blocks=0 [ 124.763191][ T5255] EXT4-fs (loop5): dirty_blocks=5748 [ 124.768922][ T5255] EXT4-fs (loop5): Block reservation details [ 124.774989][ T5255] EXT4-fs (loop5): i_reserved_data_blocks=5748 [ 124.782555][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.7.746'. [ 124.802279][ T5255] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 124.897767][ T7345] loop5: detected capacity change from 0 to 256 [ 124.994709][ T28] audit: type=1400 audit(1773009814.119:1624): avc: denied { create } for pid=7336 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 125.090686][ T28] audit: type=1400 audit(1773009814.119:1625): avc: denied { create } for pid=7336 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.111316][ T28] audit: type=1400 audit(1773009814.119:1626): avc: denied { write } for pid=7336 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.131683][ T28] audit: type=1400 audit(1773009814.119:1627): avc: denied { bind } for pid=7336 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 125.207006][ T28] audit: type=1326 audit(1773009814.316:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0fcbc799 code=0x7ffc0000 [ 125.243396][ T28] audit: type=1326 audit(1773009814.316:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0fcbc799 code=0x7ffc0000 [ 125.303060][ T7353] loop1: detected capacity change from 0 to 2048 [ 125.328797][ T7357] loop5: detected capacity change from 0 to 1024 [ 125.337129][ T7357] ext2: Unknown parameter 'smackfstransmute' [ 125.346940][ T7353] Alternate GPT is invalid, using primary GPT. [ 125.353613][ T7353] loop1: p2 p3 p7 [ 125.571219][ T7368] syzkaller0: entered promiscuous mode [ 125.599703][ T7368] syzkaller0: entered allmulticast mode [ 125.667003][ T7376] FAULT_INJECTION: forcing a failure. [ 125.667003][ T7376] name failslab, interval 1, probability 0, space 0, times 0 [ 125.680535][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.6.758 Not tainted syzkaller #0 PREEMPT(full) [ 125.680569][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.680635][ T7376] Call Trace: [ 125.680640][ T7376] [ 125.680647][ T7376] __dump_stack+0x1d/0x30 [ 125.680700][ T7376] dump_stack_lvl+0x95/0xd0 [ 125.680721][ T7376] dump_stack+0x15/0x1b [ 125.680782][ T7376] should_fail_ex+0x263/0x280 [ 125.680803][ T7376] should_failslab+0x8c/0xb0 [ 125.680822][ T7376] __kmalloc_node_noprof+0xc8/0x560 [ 125.680883][ T7376] ? crypto_create_tfm_node+0x5c/0x250 [ 125.680904][ T7376] crypto_create_tfm_node+0x5c/0x250 [ 125.680922][ T7376] ? crypto_mod_get+0x5a/0x90 [ 125.680939][ T7376] crypto_spawn_tfm2+0x43/0x80 [ 125.681035][ T7376] aead_init_geniv+0xe7/0x140 [ 125.681061][ T7376] ? __pfx_aead_init_geniv+0x10/0x10 [ 125.681087][ T7376] crypto_aead_init_tfm+0xba/0xd0 [ 125.681113][ T7376] crypto_create_tfm_node+0x108/0x250 [ 125.681199][ T7376] crypto_alloc_tfm_node+0xdc/0x2b0 [ 125.681221][ T7376] crypto_alloc_aead+0x2d/0x40 [ 125.681331][ T7376] esp_init_state+0x3f3/0xa00 [ 125.681368][ T7376] ? irqentry_exit+0x91/0x520 [ 125.681412][ T7376] __xfrm_init_state+0x77d/0xbf0 [ 125.681511][ T7376] xfrm_add_sa+0x1f53/0x25d0 [ 125.681544][ T7376] xfrm_user_rcv_msg+0x576/0x670 [ 125.681563][ T7376] ? __kfree_skb+0x109/0x150 [ 125.681659][ T7376] ? nlmon_xmit+0x4f/0x60 [ 125.681711][ T7376] ? consume_skb+0x4b/0x160 [ 125.681798][ T7376] netlink_rcv_skb+0x123/0x220 [ 125.681822][ T7376] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 125.681844][ T7376] xfrm_netlink_rcv+0x48/0x60 [ 125.681896][ T7376] netlink_unicast+0x5c0/0x690 [ 125.681921][ T7376] netlink_sendmsg+0x5c8/0x6f0 [ 125.681948][ T7376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.681973][ T7376] ____sys_sendmsg+0x563/0x5b0 [ 125.682060][ T7376] ___sys_sendmsg+0x195/0x1e0 [ 125.682207][ T7376] __x64_sys_sendmsg+0xd4/0x160 [ 125.682238][ T7376] x64_sys_call+0x194c/0x3020 [ 125.682323][ T7376] do_syscall_64+0x12c/0x370 [ 125.682341][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.682380][ T7376] RIP: 0033:0x7f6c44ebc799 [ 125.682540][ T7376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.682557][ T7376] RSP: 002b:00007f6c43917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.682574][ T7376] RAX: ffffffffffffffda RBX: 00007f6c45135fa0 RCX: 00007f6c44ebc799 [ 125.682587][ T7376] RDX: 0000000020004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 125.682598][ T7376] RBP: 00007f6c43917090 R08: 0000000000000000 R09: 0000000000000000 [ 125.682609][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.682620][ T7376] R13: 00007f6c45136038 R14: 00007f6c45135fa0 R15: 00007ffc36730178 [ 125.682676][ T7376] [ 126.104118][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 126.302948][ T7387] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 126.315987][ T7387] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.326725][ T7387] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 126.366217][ T7393] loop7: detected capacity change from 0 to 1024 [ 126.392148][ T7393] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 126.438051][ T7401] loop5: detected capacity change from 0 to 1024 [ 126.446379][ T7393] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.457172][ T7401] ext2: Unknown parameter 'smackfstransmute' [ 126.478554][ T7393] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 126.551205][ T7393] EXT4-fs (loop7): orphan cleanup on readonly fs [ 126.571428][ T7393] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.762: Inode bitmap for bg 0 marked uninitialized [ 126.584339][ T7393] loop7: lost filesystem error report for type 5 error -117 [ 126.584501][ T7393] EXT4-fs (loop7): Remounting filesystem read-only [ 126.598463][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 126.598486][ C0] EXT4-fs (loop7): initial error at time 1773009815: ext4_read_inode_bitmap:167 [ 126.598517][ C0] EXT4-fs (loop7): last error at time 1773009815: ext4_read_inode_bitmap:167 [ 126.623368][ T7393] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.670544][ T7416] syzkaller0: entered promiscuous mode [ 126.679228][ T7416] syzkaller0: entered allmulticast mode [ 126.696856][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.549314][ T7434] loop7: detected capacity change from 0 to 4096 [ 128.928895][ T7434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.943716][ T7434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.163388][ T7456] netlink: 'syz.1.782': attribute type 21 has an invalid length. [ 129.208037][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 129.208052][ T28] audit: type=1400 audit(1773009818.077:1707): avc: denied { ioctl } for pid=7458 comm="syz.5.783" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.292592][ T28] audit: type=1326 audit(1773009818.142:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0fcbc799 code=0x7ffc0000 [ 129.316858][ T28] audit: type=1326 audit(1773009818.142:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0fcbc799 code=0x7ffc0000 [ 129.355746][ T28] audit: type=1326 audit(1773009818.142:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f4c0fcbc799 code=0x7ffc0000 [ 129.383078][ T28] audit: type=1326 audit(1773009818.142:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0fcbc799 code=0x7ffc0000 [ 129.406757][ T28] audit: type=1326 audit(1773009818.142:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.0.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0fcbc799 code=0x7ffc0000 [ 129.440209][ T7468] loop6: detected capacity change from 0 to 1024 [ 129.446509][ T7470] netlink: 100 bytes leftover after parsing attributes in process `syz.5.787'. [ 129.446962][ T7470] netlink: 100 bytes leftover after parsing attributes in process `syz.5.787'. [ 129.527273][ T7468] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 129.570541][ T28] audit: type=1400 audit(1773009818.404:1713): avc: denied { getopt } for pid=7471 comm="syz.5.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.601414][ T7468] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.785: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.624072][ T7468] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 129.624340][ T7468] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 129.633447][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 129.633476][ C0] EXT4-fs (loop6): initial error at time 1773009818: ext4_map_blocks:776: inode 3: block 2 [ 129.633519][ C0] EXT4-fs (loop6): last error at time 1773009818: ext4_map_blocks:776: inode 3: block 2 [ 129.668180][ T7468] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.785: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.682953][ T7468] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 129.683075][ T7468] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 129.702508][ T7468] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.785: Failed to acquire dquot type 0 [ 129.717367][ T7487] loop5: detected capacity change from 0 to 512 [ 129.724318][ T7468] loop6: lost filesystem error report for type 5 error -117 [ 129.729180][ T7468] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 129.746271][ T7468] loop6: lost filesystem error report for type 5 error -117 [ 129.746458][ T7468] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.785: mark_inode_dirty error [ 129.767772][ T7489] loop1: detected capacity change from 0 to 256 [ 129.772517][ T7468] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 129.789292][ T7468] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 129.811865][ T7487] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 129.811921][ T7468] EXT4-fs (loop6): 1 orphan inode deleted [ 129.826614][ T7468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.838904][ T50] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.857387][ T7487] System zones: 0-2, 18-18, 34-34 [ 129.874744][ T50] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 129.884482][ T50] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0 [ 129.897260][ T7487] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 129.924377][ T7487] EXT4-fs (loop5): Remounting filesystem read-only [ 129.931059][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 129.931082][ C0] EXT4-fs (loop5): initial error at time 1773009818: ext4_mb_generate_buddy:1315 [ 129.931107][ C0] EXT4-fs (loop5): last error at time 1773009818: ext4_mb_generate_buddy:1315 [ 129.957484][ T7487] EXT4-fs (loop5): 1 truncate cleaned up [ 129.971633][ T50] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 129.982776][ T7487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.995470][ T50] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.009157][ T50] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 130.026997][ T7487] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.059739][ T7497] 9p: Bad value for 'wfdno' [ 130.085605][ T4791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.116915][ T7514] hsr0: entered promiscuous mode [ 130.163207][ T7516] loop1: detected capacity change from 0 to 512 [ 130.192469][ T7516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.206308][ T7516] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.245760][ T5358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.269712][ T5358] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 130.309257][ T5358] loop6: lost filesystem error report for type 5 error -117 [ 130.309520][ T5358] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 130.326592][ T5358] loop6: lost filesystem error report for type 5 error -117 [ 130.334659][ T7528] loop5: detected capacity change from 0 to 256 [ 130.341145][ T5358] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 130.359942][ T5358] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 130.449432][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 130.595686][ T7549] FAULT_INJECTION: forcing a failure. [ 130.595686][ T7549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.624534][ T7552] loop7: detected capacity change from 0 to 128 [ 130.634417][ T7549] CPU: 1 UID: 0 PID: 7549 Comm: syz.6.811 Not tainted syzkaller #0 PREEMPT(full) [ 130.634461][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.634511][ T7549] Call Trace: [ 130.634519][ T7549] [ 130.634528][ T7549] __dump_stack+0x1d/0x30 [ 130.634562][ T7549] dump_stack_lvl+0x95/0xd0 [ 130.634592][ T7549] dump_stack+0x15/0x1b [ 130.634620][ T7549] should_fail_ex+0x263/0x280 [ 130.634692][ T7549] should_fail+0xb/0x20 [ 130.634715][ T7549] should_fail_usercopy+0x1a/0x20 [ 130.634756][ T7549] _copy_from_user+0x1c/0xb0 [ 130.634802][ T7549] kstrtouint_from_user+0x69/0xf0 [ 130.634835][ T7549] proc_fail_nth_write+0x50/0x160 [ 130.634876][ T7549] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.634911][ T7549] vfs_write+0x269/0x9f0 [ 130.634986][ T7549] ? __rcu_read_unlock+0x4e/0x70 [ 130.635015][ T7549] ? __fget_files+0x184/0x1c0 [ 130.635071][ T7549] ? mutex_lock+0x57/0x90 [ 130.635106][ T7549] ksys_write+0xdc/0x1a0 [ 130.635131][ T7549] __x64_sys_write+0x40/0x50 [ 130.635235][ T7549] x64_sys_call+0x27e1/0x3020 [ 130.635266][ T7549] do_syscall_64+0x12c/0x370 [ 130.635294][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.635323][ T7549] RIP: 0033:0x7f6c44e7cfce [ 130.635343][ T7549] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.635420][ T7549] RSP: 002b:00007f6c43916fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.635446][ T7549] RAX: ffffffffffffffda RBX: 00007f6c439176c0 RCX: 00007f6c44e7cfce [ 130.635464][ T7549] RDX: 0000000000000001 RSI: 00007f6c439170a0 RDI: 0000000000000007 [ 130.635478][ T7549] RBP: 00007f6c43917090 R08: 0000000000000000 R09: 0000000000000000 [ 130.635495][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.635510][ T7549] R13: 00007f6c45136038 R14: 00007f6c45135fa0 R15: 00007ffc36730178 [ 130.635536][ T7549] [ 130.643395][ T7545] 9p: Bad value for 'wfdno' [ 130.690503][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 130.979398][ T4605] tipc: Subscription rejected, illegal request [ 131.005159][ T7561] loop5: detected capacity change from 0 to 4096 [ 131.011998][ T7561] EXT4-fs: Ignoring removed bh option [ 131.040144][ T7561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.185006][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.227769][ T7570] hsr0: entered promiscuous mode [ 131.410673][ T7578] loop7: detected capacity change from 0 to 256 [ 131.484925][ T7582] loop7: detected capacity change from 0 to 256 [ 131.584426][ T7585] loop1: detected capacity change from 0 to 1764 [ 131.836507][ T4791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.863875][ T7593] 9p: Bad value for 'wfdno' [ 131.966460][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.827'. [ 132.010397][ T7603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.047511][ T7609] hsr0: entered promiscuous mode [ 132.153475][ T7603] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.523185][ T7620] FAULT_INJECTION: forcing a failure. [ 132.523185][ T7620] name failslab, interval 1, probability 0, space 0, times 0 [ 132.589019][ T7620] CPU: 0 UID: 0 PID: 7620 Comm: syz.1.830 Not tainted syzkaller #0 PREEMPT(full) [ 132.589053][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.589129][ T7620] Call Trace: [ 132.589137][ T7620] [ 132.589145][ T7620] __dump_stack+0x1d/0x30 [ 132.589176][ T7620] dump_stack_lvl+0x95/0xd0 [ 132.589238][ T7620] dump_stack+0x15/0x1b [ 132.589267][ T7620] should_fail_ex+0x263/0x280 [ 132.589298][ T7620] should_failslab+0x8c/0xb0 [ 132.589333][ T7620] kmem_cache_alloc_noprof+0x66/0x400 [ 132.589362][ T7620] ? alloc_empty_file+0x76/0x200 [ 132.589471][ T7620] ? __perf_event_overflow+0x6c3/0x920 [ 132.589511][ T7620] alloc_empty_file+0x76/0x200 [ 132.589573][ T7620] path_openat+0x65/0x2050 [ 132.589619][ T7620] ? perf_swevent_hrtimer+0x2e1/0x310 [ 132.589679][ T7620] ? irqentry_exit+0x91/0x520 [ 132.589735][ T7620] do_file_open+0x16c/0x290 [ 132.589841][ T7620] do_sys_openat2+0x94/0x130 [ 132.589940][ T7620] __x64_sys_openat+0xf2/0x120 [ 132.589977][ T7620] x64_sys_call+0x1e39/0x3020 [ 132.590012][ T7620] do_syscall_64+0x12c/0x370 [ 132.590038][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.590066][ T7620] RIP: 0033:0x7f90b212c799 [ 132.590125][ T7620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.590143][ T7620] RSP: 002b:00007f90b0b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.590211][ T7620] RAX: ffffffffffffffda RBX: 00007f90b23a6180 RCX: 00007f90b212c799 [ 132.590226][ T7620] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 132.590239][ T7620] RBP: 00007f90b0b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 132.590252][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.590264][ T7620] R13: 00007f90b23a6218 R14: 00007f90b23a6180 R15: 00007fff23af9ab8 [ 132.590289][ T7620] [ 132.897233][ T7629] FAULT_INJECTION: forcing a failure. [ 132.897233][ T7629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.020102][ T7629] CPU: 1 UID: 0 PID: 7629 Comm: syz.0.834 Not tainted syzkaller #0 PREEMPT(full) [ 133.020214][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.020231][ T7629] Call Trace: [ 133.020239][ T7629] [ 133.020248][ T7629] __dump_stack+0x1d/0x30 [ 133.020358][ T7629] dump_stack_lvl+0x95/0xd0 [ 133.020381][ T7629] dump_stack+0x15/0x1b [ 133.020402][ T7629] should_fail_ex+0x263/0x280 [ 133.020470][ T7629] should_fail+0xb/0x20 [ 133.020494][ T7629] should_fail_usercopy+0x1a/0x20 [ 133.020528][ T7629] _copy_from_iter+0xcf/0xea0 [ 133.020562][ T7629] ? __alloc_skb+0x4f6/0x690 [ 133.020606][ T7629] ? __alloc_skb+0x200/0x690 [ 133.020630][ T7629] netlink_sendmsg+0x4ae/0x6f0 [ 133.020671][ T7629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.020706][ T7629] ____sys_sendmsg+0x563/0x5b0 [ 133.020749][ T7629] ___sys_sendmsg+0x195/0x1e0 [ 133.020844][ T7629] __x64_sys_sendmsg+0xd4/0x160 [ 133.020875][ T7629] x64_sys_call+0x194c/0x3020 [ 133.020986][ T7629] do_syscall_64+0x12c/0x370 [ 133.021013][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.021116][ T7629] RIP: 0033:0x7f4c0fcbc799 [ 133.021209][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.021286][ T7629] RSP: 002b:00007f4c0e717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.021311][ T7629] RAX: ffffffffffffffda RBX: 00007f4c0ff35fa0 RCX: 00007f4c0fcbc799 [ 133.021328][ T7629] RDX: 0000000004000004 RSI: 0000200000000300 RDI: 0000000000000003 [ 133.021345][ T7629] RBP: 00007f4c0e717090 R08: 0000000000000000 R09: 0000000000000000 [ 133.021360][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.021375][ T7629] R13: 00007f4c0ff36038 R14: 00007f4c0ff35fa0 R15: 00007ffca5108198 [ 133.021436][ T7629] [ 133.340766][ T7639] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.371050][ T7639] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.664245][ T4791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.730006][ T7645] hsr0: entered promiscuous mode [ 133.827920][ T7650] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.871941][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.841'. [ 134.101774][ T7675] Invalid ELF header magic: != ELF [ 134.144528][ T7678] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.209838][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.850'. [ 134.222697][ T7675] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.847: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 134.394064][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.850'. [ 134.587259][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.662741][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 134.662760][ T28] audit: type=1400 audit(1773009823.175:1739): avc: denied { create } for pid=7708 comm="syz.7.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.822960][ T28] audit: type=1400 audit(1773009823.325:1740): avc: denied { write } for pid=7715 comm="syz.5.854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 134.911565][ T28] audit: type=1400 audit(1773009823.418:1741): avc: denied { mount } for pid=7737 comm="syz.7.857" name="/" dev="hugetlbfs" ino=17545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 135.047561][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 135.073737][ T7750] set_capacity_and_notify: 7 callbacks suppressed [ 135.073759][ T7750] loop7: detected capacity change from 0 to 1024 [ 135.135920][ T7750] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 135.170528][ T7757] tipc: Invalid UDP bearer configuration [ 135.170546][ T7757] tipc: Enabling of bearer rejected, failed to enable media [ 135.202936][ T7750] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.861: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.260215][ T28] audit: type=1400 audit(1773009823.727:1742): avc: denied { create } for pid=7747 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.293117][ T7750] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 135.293239][ T7750] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 135.302464][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 135.302483][ C0] EXT4-fs (loop7): initial error at time 1773009823: ext4_map_blocks:776: inode 3: block 2 [ 135.302534][ C0] EXT4-fs (loop7): last error at time 1773009823: ext4_map_blocks:776: inode 3: block 2 [ 135.337690][ T28] audit: type=1400 audit(1773009823.736:1743): avc: denied { setopt } for pid=7747 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.360373][ T7750] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 48: comm syz.7.861: lblock 0 mapped to illegal pblock 48 (length 1) [ 135.384499][ T7750] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 135.384781][ T7750] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 135.405943][ T7750] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.861: Failed to acquire dquot type 0 [ 135.418987][ T7750] loop7: lost filesystem error report for type 5 error -117 [ 135.422421][ T7750] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 135.448983][ T7750] loop7: lost filesystem error report for type 5 error -117 [ 135.450691][ T7750] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.861: mark_inode_dirty error [ 135.476550][ T7750] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 135.476679][ T7750] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 135.497017][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.504323][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.513969][ T7750] EXT4-fs (loop7): 1 orphan inode deleted [ 135.530408][ T7750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.543109][ T4593] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.562377][ T4593] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 135.576667][ T4593] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 0 [ 135.667412][ T7769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.698328][ T7769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.728785][ T7769] hsr0: left promiscuous mode [ 135.789018][ T7769] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 135.810564][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.820060][ T7078] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 135.941675][ T7078] loop7: lost filesystem error report for type 5 error -117 [ 135.945250][ T7078] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 135.993666][ T7791] loop5: detected capacity change from 0 to 1024 [ 136.001200][ T7791] EXT4-fs: inline encryption not supported [ 136.085873][ T4593] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.121450][ T7078] loop7: lost filesystem error report for type 5 error -117 [ 136.121746][ T7078] EXT4-fs error (device loop7): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 136.164462][ T7790] geneve2: entered promiscuous mode [ 136.173199][ T4593] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.190047][ T7791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.211426][ T28] audit: type=1400 audit(1773009824.625:1744): avc: denied { read write } for pid=7783 comm="syz.5.866" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.252708][ T4593] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.287727][ T7078] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 136.297502][ T4593] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.358846][ T28] audit: type=1400 audit(1773009824.625:1745): avc: denied { open } for pid=7783 comm="syz.5.866" path="/106/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.444126][ T4593] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.516396][ T4593] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.569405][ T4593] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.664934][ T4593] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.917737][ T7799] loop7: detected capacity change from 0 to 128 [ 137.026997][ T7801] netlink: 164 bytes leftover after parsing attributes in process `syz.7.867'. [ 137.290228][ T7802] loop6: detected capacity change from 0 to 4096 [ 137.298172][ T7810] cgroup: Invalid name [ 137.374093][ T7802] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 137.736587][ T4791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.796398][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.821085][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.831589][ T7823] loop6: detected capacity change from 0 to 512 [ 137.838197][ T5255] Bluetooth: hci1: Frame reassembly failed (-84) [ 137.869196][ T7823] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.905331][ T7823] EXT4-fs (loop6): 1 truncate cleaned up [ 137.917255][ T7823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.944579][ T7823] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.102436][ T7830] veth3: entered allmulticast mode [ 138.448617][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.455869][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.516423][ T7855] loop6: detected capacity change from 0 to 1024 [ 138.527206][ T7855] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 138.539559][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.547128][ T7855] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.888: lblock 2 mapped to illegal pblock 2 (length 1) [ 138.561684][ T7855] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 138.561832][ T7855] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.888: lblock 0 mapped to illegal pblock 48 (length 1) [ 138.570957][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 138.570982][ C0] EXT4-fs (loop6): initial error at time 1773009826: ext4_map_blocks:776: inode 3: block 2 [ 138.571030][ C0] EXT4-fs (loop6): last error at time 1773009826: ext4_map_blocks:776: inode 3: block 2 [ 138.572479][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.585920][ T7855] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 138.608977][ T7849] hsr0: left promiscuous mode [ 138.623818][ T7855] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.888: Failed to acquire dquot type 0 [ 138.645393][ T7855] loop6: lost filesystem error report for type 5 error -117 [ 138.645523][ T7855] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 138.662718][ T7855] loop6: lost filesystem error report for type 5 error -117 [ 138.662940][ T7855] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.888: mark_inode_dirty error [ 138.682669][ T7855] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 138.682884][ T7855] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 138.702441][ T7855] EXT4-fs (loop6): 1 orphan inode deleted [ 138.708691][ T7855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.721309][ T4605] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.736208][ T4605] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:21: Failed to release dquot type 0 [ 138.750967][ T7855] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.763150][ T7849] veth3: left allmulticast mode [ 138.768835][ T7855] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.888: Invalid inode table block 1 in block_group 0 [ 138.793761][ T7855] loop6: lost filesystem error report for type 5 error -117 [ 138.794035][ T7855] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 138.798036][ T7851] geneve2: entered promiscuous mode [ 138.812003][ T7855] loop6: lost filesystem error report for type 5 error -117 [ 138.817557][ T58] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.822479][ T7855] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz.6.888: mark_inode_dirty error [ 138.825785][ T58] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 56579 - 0 [ 138.843773][ T7855] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 138.846650][ T58] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.872725][ T58] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 56579 - 0 [ 138.882198][ T58] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.894301][ T58] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 56579 - 0 [ 138.907846][ T5255] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.921523][ T5255] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 56579 - 0 [ 138.958380][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.890'. [ 139.024686][ T7873] loop7: detected capacity change from 0 to 256 [ 139.050001][ T7874] loop1: detected capacity change from 0 to 128 [ 139.145301][ T7887] loop1: detected capacity change from 0 to 1024 [ 139.153915][ T7887] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.162439][ T7887] EXT4-fs (loop1): 1 truncate cleaned up [ 139.169259][ T7887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.244195][ T7880] loop7: detected capacity change from 0 to 512 [ 139.283879][ T7892] SELinux: syz.0.901 (7892) set checkreqprot to 1. This is no longer supported. [ 139.350919][ T7880] EXT4-fs (loop7): 1 truncate cleaned up [ 139.376685][ T7880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.555338][ T7880] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.895: bg 0: block 465: padding at end of block bitmap is not set [ 139.564184][ T7904] kernel read not supported for file /policy (pid: 7904 comm: syz.0.906) [ 139.605094][ T7880] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 139.676665][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.719642][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.911'. [ 139.923412][ T7928] netlink: 100 bytes leftover after parsing attributes in process `syz.0.912'. [ 139.933658][ T7928] netlink: 100 bytes leftover after parsing attributes in process `syz.0.912'. [ 139.963337][ T7824] Bluetooth: hci0: command 0x1003 tx timeout [ 139.969812][ T3508] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 140.027458][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 140.040893][ T3508] Bluetooth: hci1: command 0x1003 tx timeout [ 140.048712][ T7822] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 140.053444][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.915'. [ 140.065230][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.911'. [ 140.072616][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 140.072665][ T28] audit: type=1400 audit(1773009828.236:1767): avc: denied { write } for pid=7934 comm="syz.6.915" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.111977][ T28] audit: type=1400 audit(1773009828.274:1768): avc: denied { open } for pid=7934 comm="syz.6.915" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.147786][ T28] audit: type=1400 audit(1773009828.302:1769): avc: denied { ioctl } for pid=7934 comm="syz.6.915" path="socket:[18951]" dev="sockfs" ino=18951 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 140.181873][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.215035][ T28] audit: type=1400 audit(1773009828.377:1770): avc: denied { execute } for pid=7934 comm="syz.6.915" path="/96/cpu.stat" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.270168][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 140.300992][ T7942] netlink: 'syz.5.917': attribute type 4 has an invalid length. [ 140.384352][ T28] audit: type=1400 audit(1773009828.377:1771): avc: denied { ioctl } for pid=7934 comm="syz.6.915" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.523268][ T28] audit: type=1400 audit(1773009828.451:1772): avc: denied { mount } for pid=7941 comm="syz.5.917" name="/" dev="autofs" ino=18963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 140.549139][ T7952] set_capacity_and_notify: 1 callbacks suppressed [ 140.549161][ T7952] loop6: detected capacity change from 0 to 256 [ 140.669911][ T28] audit: type=1400 audit(1773009828.798:1773): avc: denied { read } for pid=7960 comm="syz.1.923" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.719929][ T7964] netlink: 100 bytes leftover after parsing attributes in process `syz.6.924'. [ 140.789400][ T7964] netlink: 100 bytes leftover after parsing attributes in process `syz.6.924'. [ 140.858049][ T28] audit: type=1400 audit(1773009828.798:1774): avc: denied { setattr } for pid=7960 comm="syz.1.923" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.960211][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.927'. [ 140.976021][ T7977] loop7: detected capacity change from 0 to 512 [ 141.060920][ T7977] EXT4-fs (loop7): 1 truncate cleaned up [ 141.067184][ T28] audit: type=1400 audit(1773009829.153:1775): avc: denied { mount } for pid=7984 comm="syz.5.930" name="/" dev="ramfs" ino=17935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 141.219679][ T7977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.338490][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.365076][ T7987] loop5: detected capacity change from 0 to 2048 [ 141.371564][ T28] audit: type=1400 audit(1773009829.153:1776): avc: denied { bind } for pid=7984 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.609106][ T7998] netlink: 3260 bytes leftover after parsing attributes in process `syz.7.934'. [ 141.758403][ T8006] netlink: 100 bytes leftover after parsing attributes in process `syz.7.937'. [ 141.771448][ T8006] netlink: 100 bytes leftover after parsing attributes in process `syz.7.937'. [ 142.103592][ T8030] loop5: detected capacity change from 0 to 128 [ 142.218443][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 142.364658][ T8049] netlink: 100 bytes leftover after parsing attributes in process `syz.6.949'. [ 142.590040][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.952'. [ 143.002558][ T8072] hsr0: entered promiscuous mode [ 143.029747][ T8074] syzkaller0: entered promiscuous mode [ 143.035443][ T8074] syzkaller0: entered allmulticast mode [ 143.065256][ T8074] ALSA: seq fatal error: cannot create timer (-19) [ 143.220702][ T35] IPVS: starting estimator thread 0... [ 143.333130][ T8084] IPVS: using max 2448 ests per chain, 122400 per kthread [ 143.390469][ T8098] FAULT_INJECTION: forcing a failure. [ 143.390469][ T8098] name failslab, interval 1, probability 0, space 0, times 0 [ 143.422429][ T8098] CPU: 1 UID: 0 PID: 8098 Comm: syz.7.969 Not tainted syzkaller #0 PREEMPT(full) [ 143.422456][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.422471][ T8098] Call Trace: [ 143.422478][ T8098] [ 143.422488][ T8098] __dump_stack+0x1d/0x30 [ 143.422522][ T8098] dump_stack_lvl+0x95/0xd0 [ 143.422607][ T8098] dump_stack+0x15/0x1b [ 143.422629][ T8098] should_fail_ex+0x263/0x280 [ 143.422662][ T8098] should_failslab+0x8c/0xb0 [ 143.422684][ T8098] kmem_cache_alloc_noprof+0x66/0x400 [ 143.422708][ T8098] ? alloc_empty_file+0x76/0x200 [ 143.422743][ T8098] alloc_empty_file+0x76/0x200 [ 143.422912][ T8098] alloc_file_pseudo+0xf6/0x190 [ 143.422948][ T8098] __se_sys_memfd_secret+0x127/0x240 [ 143.423055][ T8098] __x64_sys_memfd_secret+0x1f/0x30 [ 143.423093][ T8098] x64_sys_call+0x2d82/0x3020 [ 143.423119][ T8098] do_syscall_64+0x12c/0x370 [ 143.423140][ T8098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.423233][ T8098] RIP: 0033:0x7efed791c799 [ 143.423249][ T8098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.423267][ T8098] RSP: 002b:00007efed636f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 143.423291][ T8098] RAX: ffffffffffffffda RBX: 00007efed7b95fa0 RCX: 00007efed791c799 [ 143.423340][ T8098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.423356][ T8098] RBP: 00007efed636f090 R08: 0000000000000000 R09: 0000000000000000 [ 143.423373][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.423389][ T8098] R13: 00007efed7b96038 R14: 00007efed7b95fa0 R15: 00007ffe0765b7d8 [ 143.423441][ T8098] [ 143.795588][ T8110] netlink: 3260 bytes leftover after parsing attributes in process `syz.6.973'. [ 143.901026][ T8123] loop7: detected capacity change from 0 to 256 [ 143.921328][ T8126] netlink: 'syz.0.979': attribute type 4 has an invalid length. [ 143.977470][ T8120] veth3: entered allmulticast mode [ 144.045770][ T8016] loop1: detected capacity change from 0 to 512 [ 144.352110][ T8016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 144.389442][ T8161] loop7: detected capacity change from 0 to 256 [ 144.443203][ T8016] ext4 filesystem being mounted at /208/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.547919][ T8174] loop5: detected capacity change from 0 to 128 [ 144.568787][ T8174] bio_check_eod: 101 callbacks suppressed [ 144.568802][ T8174] syz.5.998: attempt to access beyond end of device [ 144.568802][ T8174] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 144.617178][ T8174] syz.5.998: attempt to access beyond end of device [ 144.617178][ T8174] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 144.630921][ T8174] buffer_io_error: 15 callbacks suppressed [ 144.630939][ T8174] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 144.646212][ T8174] syz.5.998: attempt to access beyond end of device [ 144.646212][ T8174] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 144.669390][ T8174] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 144.687262][ T8174] syz.5.998: attempt to access beyond end of device [ 144.687262][ T8174] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 144.757546][ T8174] syz.5.998: attempt to access beyond end of device [ 144.757546][ T8174] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 144.803847][ T8174] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 144.838112][ T8174] syz.5.998: attempt to access beyond end of device [ 144.838112][ T8174] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 144.883042][ T8174] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 144.906188][ T8189] loop6: detected capacity change from 0 to 256 [ 144.913728][ T8174] syz.5.998: attempt to access beyond end of device [ 144.913728][ T8174] loop5: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 144.929127][ T8001] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 1632 free clusters [ 144.947441][ T8174] syz.5.998: attempt to access beyond end of device [ 144.947441][ T8174] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 144.988055][ T8001] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 1 with error 28 [ 145.004561][ T8174] syz.5.998: attempt to access beyond end of device [ 145.004561][ T8174] loop5: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 145.075524][ T8174] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 145.086146][ T8001] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.086146][ T8001] [ 145.120467][ T8201] lo speed is unknown, defaulting to 1000 [ 145.126931][ T8001] EXT4-fs (loop1): Total free blocks count 0 [ 145.154484][ T8174] syz.5.998: attempt to access beyond end of device [ 145.154484][ T8174] loop5: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 145.155549][ T8001] EXT4-fs (loop1): Free/Dirty block details [ 145.184208][ T8201] lo speed is unknown, defaulting to 1000 [ 145.199323][ T8201] lo speed is unknown, defaulting to 1000 [ 145.212478][ T8174] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 145.222230][ T8001] EXT4-fs (loop1): free_blocks=1536 [ 145.236463][ T8001] EXT4-fs (loop1): dirty_blocks=1 [ 145.252708][ T8001] EXT4-fs (loop1): Block reservation details [ 145.289214][ T8001] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 145.295820][ T8174] Buffer I/O error on dev loop5, logical block 103, lost async page write [ 145.321427][ T8174] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 145.332733][ T8174] Buffer I/O error on dev loop5, logical block 107, lost async page write [ 145.351013][ T8174] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 145.372037][ T8201] infiniband syz0: set down [ 145.380901][ T3400] lo speed is unknown, defaulting to 1000 [ 145.416576][ T8201] infiniband syz0: added lo [ 145.466997][ T8201] RDS/IB: syz0: added [ 145.478436][ T8201] smc: adding ib device syz0 with port count 1 [ 145.484803][ T8201] smc: ib device syz0 port 1 has no pnetid [ 145.491346][ T35] lo speed is unknown, defaulting to 1000 [ 145.498063][ T8201] lo speed is unknown, defaulting to 1000 [ 145.566744][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 145.662769][ T8201] lo speed is unknown, defaulting to 1000 [ 145.722733][ T8225] loop7: detected capacity change from 0 to 256 [ 145.781583][ T8201] lo speed is unknown, defaulting to 1000 [ 145.823301][ T8231] option changes via remount are deprecated (pid=8230 comm=syz.7.1018) [ 145.831756][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 145.831772][ T28] audit: type=1400 audit(1773009833.616:1781): avc: denied { remount } for pid=8230 comm="syz.7.1018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 145.865246][ T8231] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 "" [ 145.973459][ T28] audit: type=1400 audit(1773009833.756:1782): avc: denied { unmount } for pid=7078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 146.025829][ T8201] lo speed is unknown, defaulting to 1000 [ 146.113731][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.121110][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.132894][ T8246] __nla_validate_parse: 4 callbacks suppressed [ 146.132966][ T8246] netlink: 3260 bytes leftover after parsing attributes in process `syz.5.1023'. [ 146.187384][ T8229] lo speed is unknown, defaulting to 1000 [ 146.251850][ T8256] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1028'. [ 146.262507][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1026'. [ 146.297492][ T8256] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1028'. [ 146.353989][ T8201] lo speed is unknown, defaulting to 1000 [ 146.416294][ T8264] loop7: detected capacity change from 0 to 1024 [ 146.427091][ T8264] EXT4-fs: inline encryption not supported [ 146.437603][ T8264] EXT4-fs: Ignoring removed nobh option [ 146.465862][ T8264] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 146.475368][ T8264] System zones: 0-1, 3-12 [ 146.505716][ T8264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.558975][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 146.608935][ T8264] Invalid option length (316) for dns_resolver key [ 146.671879][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.830749][ T8290] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1040'. [ 146.848788][ T8273] lo speed is unknown, defaulting to 1000 [ 146.856520][ T8290] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1040'. [ 147.063809][ T28] audit: type=1400 audit(1773009834.785:1783): avc: denied { setopt } for pid=8299 comm="syz.5.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.092455][ T8306] loop6: detected capacity change from 0 to 1024 [ 147.151211][ T8306] EXT4-fs: Ignoring removed orlov option [ 147.160086][ T28] audit: type=1400 audit(1773009834.850:1784): avc: denied { read } for pid=8299 comm="syz.5.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.167967][ T8306] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 147.199166][ T8300] lo speed is unknown, defaulting to 1000 [ 147.246285][ T8306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.303173][ T8307] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.316926][ T8307] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 147.338259][ T28] audit: type=1400 audit(1773009835.038:1785): avc: denied { link } for pid=8305 comm="syz.6.1048" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.360701][ T28] audit: type=1400 audit(1773009835.047:1786): avc: denied { listen } for pid=8305 comm="syz.6.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 147.417419][ T8319] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1052'. [ 147.449103][ T5358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.470017][ T8313] netlink: 3260 bytes leftover after parsing attributes in process `syz.0.1050'. [ 147.482749][ T8323] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1052'. [ 147.567183][ T8307] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.607479][ T8307] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 147.803773][ T8307] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.863442][ T8307] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 147.903967][ T8345] veth3: entered allmulticast mode [ 147.944554][ T8335] lo speed is unknown, defaulting to 1000 [ 147.959319][ T8307] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.014997][ T8307] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 148.174024][ T50] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 148.203946][ T50] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.244632][ T50] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 148.300802][ T50] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.368818][ T50] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 148.427569][ T50] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.462072][ T50] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 148.492382][ T50] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.610576][ T8384] loop6: detected capacity change from 0 to 512 [ 148.624150][ T8350] loop1: detected capacity change from 0 to 32768 [ 148.661998][ T8384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.733274][ T8350] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 148.763291][ T8384] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.774045][ T8350] loop1: p1 start 460800 is beyond EOD, truncated [ 148.780642][ T8350] loop1: p2 size 83886080 extends beyond EOD, truncated [ 148.804724][ T28] audit: type=1400 audit(1773009836.403:1787): avc: denied { read } for pid=8395 comm="syz.0.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.858755][ T8350] loop1: p5 start 460800 is beyond EOD, truncated [ 148.876191][ T8350] loop1: p6 size 83886080 extends beyond EOD, truncated [ 148.903070][ T8384] lo speed is unknown, defaulting to 1000 [ 149.027719][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.034987][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.189439][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 149.200215][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 149.203777][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 149.223126][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 149.275315][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 149.276001][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 149.296566][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 149.327190][ T28] audit: type=1326 audit(1773009836.871:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b212c799 code=0x7ffc0000 [ 149.352233][ T28] audit: type=1326 audit(1773009836.871:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b212c799 code=0x7ffc0000 [ 149.386295][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 149.387734][ T5358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.467810][ T28] audit: type=1326 audit(1773009836.871:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.1.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f90b212c799 code=0x7ffc0000 [ 149.587554][ T8437] netem: incorrect gi model size [ 149.591404][ T8449] loop7: detected capacity change from 0 to 512 [ 149.592834][ T8437] netem: change failed [ 149.604422][ T8449] EXT4-fs (loop7): 1 truncate cleaned up [ 149.637501][ T8449] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.668621][ T8457] loop5: detected capacity change from 0 to 512 [ 149.709383][ T8449] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1103: bg 0: block 465: padding at end of block bitmap is not set [ 149.768351][ T8457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.816469][ T8449] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 12288 with max blocks 1 with error 28 [ 149.841405][ T8464] syzkaller0: entered promiscuous mode [ 149.855401][ T8457] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.874627][ T8467] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 149.887411][ T8464] syzkaller0: entered allmulticast mode [ 149.915897][ T8457] lo speed is unknown, defaulting to 1000 [ 149.942023][ T8449] EXT4-fs (loop7): This should not happen!! Data will be lost [ 149.942023][ T8449] [ 149.981069][ T8467] EXT4-fs (loop7): This should not happen!! Data will be lost [ 149.981069][ T8467] [ 150.002939][ T8449] EXT4-fs (loop7): Total free blocks count 0 [ 150.009348][ T8467] EXT4-fs (loop7): Total free blocks count 0 [ 150.015609][ T8449] EXT4-fs (loop7): Free/Dirty block details [ 150.021694][ T8467] EXT4-fs (loop7): Free/Dirty block details [ 150.027971][ T8449] EXT4-fs (loop7): free_blocks=0 [ 150.083509][ T4791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.186538][ T8486] loop7: detected capacity change from 0 to 256 [ 150.214597][ T8486] FAT-fs (loop7): count of clusters too big (178174) [ 150.230902][ T8486] FAT-fs (loop7): Can't find a valid FAT filesystem [ 150.478484][ T8507] netlink: 'syz.5.1126': attribute type 5 has an invalid length. [ 150.600336][ T8513] syzkaller0: entered promiscuous mode [ 150.606231][ T8513] syzkaller0: entered allmulticast mode [ 151.075218][ T8535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8535 comm=syz.1.1138 [ 151.217153][ T8542] lo speed is unknown, defaulting to 1000 [ 151.531360][ T8549] __nla_validate_parse: 19 callbacks suppressed [ 151.531381][ T8549] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1142'. [ 151.564571][ T8549] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1142'. [ 151.583470][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 151.583484][ T28] audit: type=1326 audit(1773009839.004:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.7.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed791c799 code=0x7ffc0000 [ 151.636628][ T28] audit: type=1326 audit(1773009839.032:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.7.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed791c799 code=0x7ffc0000 [ 151.681812][ T28] audit: type=1326 audit(1773009839.032:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.7.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7efed791c799 code=0x7ffc0000 [ 151.729028][ T8554] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1144'. [ 151.745511][ T28] audit: type=1326 audit(1773009839.032:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.7.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed791c799 code=0x7ffc0000 [ 151.771808][ T8554] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1144'. [ 151.839513][ T28] audit: type=1326 audit(1773009839.032:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.7.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7efed791c799 code=0x7ffc0000 [ 151.888900][ T28] audit: type=1326 audit(1773009839.032:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.7.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed791c799 code=0x7ffc0000 [ 151.925917][ T28] audit: type=1326 audit(1773009839.032:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.7.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efed791c799 code=0x7ffc0000 [ 151.967854][ T28] audit: type=1326 audit(1773009839.032:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.7.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed791c799 code=0x7ffc0000 [ 152.002039][ T28] audit: type=1326 audit(1773009839.032:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.7.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efed791c799 code=0x7ffc0000 [ 152.039882][ T28] audit: type=1326 audit(1773009839.032:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.7.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed791c799 code=0x7ffc0000 [ 152.523125][ T8573] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1152'. [ 152.535475][ T8571] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1151'. [ 152.545521][ T8571] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1151'. [ 152.593714][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 152.637327][ T8582] xt_cgroup: path and classid specified [ 152.645956][ T8582] netlink: 'syz.0.1155': attribute type 3 has an invalid length. [ 152.660441][ T8575] lo speed is unknown, defaulting to 1000 [ 152.675497][ T8573] Invalid argument reading file caps for ./file0 [ 152.800941][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.018955][ T8608] loop5: detected capacity change from 0 to 1024 [ 153.044043][ T8608] EXT4-fs: Ignoring removed oldalloc option [ 153.059389][ T8608] EXT4-fs: Ignoring removed bh option [ 153.091546][ T8608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.208224][ T8616] netem: incorrect gi model size [ 153.474043][ T8608] ================================================================== [ 153.482189][ T8608] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 153.490146][ T8608] [ 153.492493][ T8608] write to 0xffff88811b39cfac of 4 bytes by task 8619 on cpu 0: [ 153.500239][ T8608] xas_set_mark+0x12b/0x140 [ 153.504841][ T8608] __folio_start_writeback+0x17b/0x370 [ 153.510441][ T8608] ext4_bio_write_folio+0x5ad/0x9f0 [ 153.515683][ T8608] mpage_process_page_bufs+0x4a1/0x620 [ 153.521267][ T8608] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 153.527111][ T8608] ext4_do_writepages+0xa07/0x2840 [ 153.532288][ T8608] ext4_writepages+0x18f/0x320 [ 153.537096][ T8608] do_writepages+0x1c6/0x310 [ 153.541879][ T8608] file_write_and_wait_range+0x178/0x2f0 [ 153.547539][ T8608] generic_buffers_fsync_noflush+0x45/0x130 [ 153.553451][ T8608] ext4_sync_file+0x1aa/0x6b0 [ 153.558250][ T8608] vfs_fsync_range+0xc5/0xe0 [ 153.562876][ T8608] ext4_buffered_write_iter+0x34f/0x3c0 [ 153.568705][ T8608] ext4_file_write_iter+0x380/0xfa0 [ 153.574000][ T8608] iter_file_splice_write+0x6c4/0xa80 [ 153.579397][ T8608] direct_splice_actor+0x156/0x2a0 [ 153.584534][ T8608] splice_direct_to_actor+0x311/0x670 [ 153.589939][ T8608] do_splice_direct+0x119/0x1a0 [ 153.594814][ T8608] do_sendfile+0x382/0x650 [ 153.599276][ T8608] __x64_sys_sendfile64+0x105/0x150 [ 153.604499][ T8608] x64_sys_call+0x2dc4/0x3020 [ 153.609196][ T8608] do_syscall_64+0x12c/0x370 [ 153.613849][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.619758][ T8608] [ 153.622099][ T8608] read to 0xffff88811b39cfac of 4 bytes by task 8608 on cpu 1: [ 153.629678][ T8608] __writeback_single_inode+0x26b/0x860 [ 153.635350][ T8608] writeback_single_inode+0x16d/0x3f0 [ 153.640741][ T8608] sync_inode_metadata+0x6e/0xa0 [ 153.645717][ T8608] generic_buffers_fsync_noflush+0xee/0x130 [ 153.651621][ T8608] ext4_sync_file+0x1aa/0x6b0 [ 153.656313][ T8608] vfs_fsync_range+0xc5/0xe0 [ 153.660918][ T8608] ext4_buffered_write_iter+0x34f/0x3c0 [ 153.666481][ T8608] ext4_file_write_iter+0x380/0xfa0 [ 153.671871][ T8608] iter_file_splice_write+0x6c4/0xa80 [ 153.677255][ T8608] direct_splice_actor+0x156/0x2a0 [ 153.682381][ T8608] splice_direct_to_actor+0x311/0x670 [ 153.687772][ T8608] do_splice_direct+0x119/0x1a0 [ 153.692636][ T8608] do_sendfile+0x382/0x650 [ 153.697259][ T8608] __x64_sys_sendfile64+0x105/0x150 [ 153.702517][ T8608] x64_sys_call+0x2dc4/0x3020 [ 153.707229][ T8608] do_syscall_64+0x12c/0x370 [ 153.711848][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.717773][ T8608] [ 153.720128][ T8608] value changed: 0x0a000021 -> 0x04000021 [ 153.725853][ T8608] [ 153.728237][ T8608] Reported by Kernel Concurrency Sanitizer on: [ 153.734415][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.5.1166 Not tainted syzkaller #0 PREEMPT(full) [ 153.743751][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.753849][ T8608] ================================================================== [ 153.952702][ T4791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.